Source document: https://docs-lawep.s3.us-east-2.amazonaws.com/1697809769443.pdf (Mauritius)
Privacy aspects of ICT Projects Avinash Meetoo Senior Adviser of the Minister of Technology, Communication & Innovation Vision 2030 for Mauritius Become an inclusive high-income country Smart Mauritius Software, Hardware and Data are eating the world bit.ly/topskills2018 Major technical challenge How to build computer systems which use personal data while protecting an individual's privacy?
Two technical solutions Computer & Information security C O M P U S E C Computer Security The protection of computer systems from the theft of or damage to their hardware, software or electronic data as well as from the disruption or misdirection of the services they provide C O M P U S E C Computer Security The protection of computer systems from the theft of or damage to their hardware, software or electronic data as well as from the disruption or misdirection of the services they provide Vulnerabilities & Attacks Social engineering Direct-access attacks Eavesdropping Phishing Backdoor Denial-of-service attack Privilege escalation C O M P U S E C Computer Security The protection of computer systems from the theft of or damage to their hardware, software or electronic data as well as from the disruption or misdirection of the services they provide Vulnerabilities & Attacks Social engineering Direct-access attacks Eavesdropping Phishing Backdoor Denial-of-service attack Privilege escalation Countermeasures Security by design (principle of least privilege) Security measures (access control, two-factor authentication, cryptography, firewalls, intrusion detection) Hardware protection Secure operating systems End-user training Incident response planning C O M P U S E C I N F O S E C Information Security Maintaining the Confidentiality, Integrity, Availability and Non-Repudiation of information in an organisation I N F O S E C Information Security Maintaining the Confidentiality, Integrity, Availability and Non-Repudiation of information in an organisation Vulnerabilities & Attacks Insider threats Equipment theft Software attacks Identity theft Intellectual property theft Sabotage Extortion I N F O S E C “Research shows that the most vulnerable point in information systems is the human” Information Security Maintaining the Confidentiality, Integrity, Availability and Non-Repudiation of information in an organisation Vulnerabilities & Attacks Insider threats Equipment theft Software attacks Identity theft Intellectual property theft Sabotage Extortion I N F O S E C Information Security Maintaining the Confidentiality, Integrity, Availability and Non-Repudiation of information in an organisation Vulnerabilities & Attacks Insider threats Equipment theft Software attacks Identity theft Intellectual property theft Sabotage Extortion “Research shows that the most vulnerable point in information systems is the human” Countermeasures Security policy Human resources security Physical security Data security Network security Asset management Business continuity management + Regulatory compliance I N F O S E C T H A N K Y O U Avinash Meetoo avinashmeetoo@gmail.com www.avinashmeetoo.com