Cyber Defence Framework by al chua https://padlet.com/cdocsafcds/cyber123123 Topic 1: People, Process, Technology (PPT) Framework Topic 2: CIA Triad en-us 2022-05-17 01:22:15 UTC 2022-08-23 04:43:28 UTC hello@padlet.com Group 1 cdocsafcds https://padlet.com/cdocsafcds/cyber123123/wish/2268145630 2022-08-23 01:49:31 UTC https://padlet.com/cdocsafcds/cyber123123/wish/2268145630 Group 2 cdocsafcds https://padlet.com/cdocsafcds/cyber123123/wish/2268145740 2022-08-23 01:49:39 UTC https://padlet.com/cdocsafcds/cyber123123/wish/2268145740 Group 3 cdocsafcds https://padlet.com/cdocsafcds/cyber123123/wish/2268145882 2022-08-23 01:49:45 UTC https://padlet.com/cdocsafcds/cyber123123/wish/2268145882 Group 4 cdocsafcds https://padlet.com/cdocsafcds/cyber123123/wish/2268145987 2022-08-23 01:49:50 UTC https://padlet.com/cdocsafcds/cyber123123/wish/2268145987 CIA Triad Framework for Public Organisation https://padlet.com/cdocsafcds/cyber123123/wish/2268173089 2022-08-23 02:14:32 UTC https://padlet.com/cdocsafcds/cyber123123/wish/2268173089 People, Process, Technology (PPT) https://padlet.com/cdocsafcds/cyber123123/wish/2268176025 2022-08-23 02:16:36 UTC https://padlet.com/cdocsafcds/cyber123123/wish/2268176025 Confidentiality https://padlet.com/cdocsafcds/cyber123123/wish/2268178428 Confidentiality is important to public organisations such as the Ministry of Health, Ministry of Home Affairs and other Ministries. 

These Ministries hold a lot of sensitive information such as personal information and records. One such information may be the list of HIV positive people, this list is kept confidential and only made available to a few select people as leaked information about the list can have huge repercussions.

If the information is leaked, the people whose information have been leaked may face problems finding work and face discrimination from family and friends.

One such situation was the incident where the data of 14,200 HIV positive people was leaked online. In this case, it was an insider threat as the information was leaked to the culprit via his partner who had access to the HIV registry

To ensure confidentiality, two-factor authentication of assessing information should be a standard procedure. Precautions should also be put in place to minimise the number of places the information appears and number of times it is transmitted to complete a required transaction. If need be, highly confidential information can be stored on air-gapped computers, disconnected storage boxes or even in hard-copy only]]> 2022-08-23 02:18:28 UTC https://padlet.com/cdocsafcds/cyber123123/wish/2268178428 Integrity https://padlet.com/cdocsafcds/cyber123123/wish/2268179632 Integrity is vital to public organizations as to prevent corruption and fostering high standards of behavior.  

In MOH, Health records include patient’s private information (e.g. health-related information, credit card details) are kept confidential so that the health, welfare and safety of patient's information is not easily leaked out.  Ministry of Health, place adequate safeguards to maintain and protect their medical records against loss, or unauthorized modification, destruction, access, disclosure, copying or use.

 In addition, they are subject to requirements under the Personal Data Protection Act, which imposes obligations to protect personal data.

]]> 2022-08-23 02:19:23 UTC https://padlet.com/cdocsafcds/cyber123123/wish/2268179632 Availability https://padlet.com/cdocsafcds/cyber123123/wish/2268179668 It ensures that the information or systems are running and accessible to those with permissions, which is important for the Ministry of Health.

In the ministry, they hold a lot of critical and urgent information on citizens like health records. Hence, they must proper contingency plans in order to assure availability of information.

Some ways to prevent compromising availability is like having DOS protection solutions, system upgrades, regular software patching, comprehensive disaster recovery plans, backups, etc. are all ways in ensuring availability.]]> 2022-08-23 02:19:25 UTC https://padlet.com/cdocsafcds/cyber123123/wish/2268179668 People https://padlet.com/cdocsafcds/cyber123123/wish/2268185905 "People" refers to the human resources available at the firm's disposal. They are the ones who do the tasks described in the process, sometimes by leveraging the technology
The aim is to employ people which possesses the right skills and talent to work and get the the intended result with 
effective communication. These key decisions will help in decision-making technology selection, process deployment, and personnel hiring.]]> 2022-08-23 02:24:24 UTC https://padlet.com/cdocsafcds/cyber123123/wish/2268185905 Apply PPT to Public/Private organization https://padlet.com/cdocsafcds/cyber123123/wish/2268191227 2022-08-23 02:28:58 UTC https://padlet.com/cdocsafcds/cyber123123/wish/2268191227 Process https://padlet.com/cdocsafcds/cyber123123/wish/2268193243 A process is the actions the series of actions or steps that need to happen in order to achieve a particular goal. People are ineffective without processes in place to support their decisions. ]]> 2022-08-23 02:30:37 UTC https://padlet.com/cdocsafcds/cyber123123/wish/2268193243 https://padlet.com/cdocsafcds/cyber123123/wish/2268193583 Integrity also involves maintaining the consistency, accuracy and trustworthiness of data over its entire lifecycle. Data must not be changed in transit, and steps must be taken to ensure data cannot be altered by unauthorized people (for example, in a breach of confidentiality).

]]> 2022-08-23 02:30:58 UTC https://padlet.com/cdocsafcds/cyber123123/wish/2268193583 People https://padlet.com/cdocsafcds/cyber123123/wish/2268194373 The main roles people have in public organizations are policy making and budgetary planning & control

-Policy Making
The most important generic function of public administration is the process of formulating government policies. It’s of great significance and importance of public administration, especially in politics and democracy due to process required in making government policies. A good policy must uphold rule of law, promote fairness, development and security for people.

-Budgetary Planning & Control
Government budgets require checks and balances, public administrators play an important function in the process of Budgetary planning and control. Through the legislative, judiciary, or executive wings of government. Deals with accounting information that gets processed in democratic government to know how much was spent in the prior year and how that was done to the performance of different ministries and public institutions.]]> 2022-08-23 02:31:38 UTC https://padlet.com/cdocsafcds/cyber123123/wish/2268194373 Varonis Systems https://padlet.com/cdocsafcds/cyber123123/wish/2268198813 Varonis is a software company that developed a security software platform that allows organizations to track, visualize, analyze and protect unstructured data.

Confidentiality - 
Varonis enables you to keep sensitive data secure by automatically identifying and classifying sensitive data while also understanding who should and should not have access.

Integrity - 
Varonis enables you to create policies that allow you to move, modify or delete data based on content type, age, sensitivity, and access activity.
It also monitors data activity, provides a complete audit trail of events, and detects unusual or risky data activity

Availability - 
This ensures that the right people have access to the data required to do their job — all without interrupting business processes.]]> 2022-08-23 02:35:04 UTC https://padlet.com/cdocsafcds/cyber123123/wish/2268198813 Patient Care Enhancement System (PACES) https://padlet.com/cdocsafcds/cyber123123/wish/2268199391 Medical personnel can view their patients' records on the go via the SAF's Electronic Medical Records system on PACES Mobile. PACES Mobile was successfully launched in October 2019 and has proven effective in enhancing patient care and safety, improving efficiency of consultations and reducing administrative overheads. PACES Mobile complies with data protection standards in MINDEF/SAF to securely provide accessibility of patients' records.]]> 2022-08-23 02:35:35 UTC https://padlet.com/cdocsafcds/cyber123123/wish/2268199391 Process https://padlet.com/cdocsafcds/cyber123123/wish/2268199798
  • Make sure people know how they fit into the workflow.
  • Identify the key steps.
  • Make sure the people doing the work receive proper training on the new processes.
  • Provide proper instructions.
  • Have a system for review in place before beginning any new process.
  • Consider how you will measure the success of a process.
  • Optimizing processes

    • Applications in real world organizations: R2 Consulting
    Increase work efficiency by eliminating unnecessary processes
    Managers taught to understand that setting arbitrary project deadlines can be detrimental to work efficiency

    ]]>     2022-08-23 02:35:54 UTC https://padlet.com/cdocsafcds/cyber123123/wish/2268199798     Technology https://padlet.com/cdocsafcds/cyber123123/wish/2268200108 The technology provides the tools that the people can use to implement the process. It also helps automate some parts of the process. Ideally, the latest and fastest technology has the most impact. It is very tempting to get attractive and shiny new tools. However, organizations need to make sure that the technology fits into the organization

    ]]>     2022-08-23 02:36:12 UTC https://padlet.com/cdocsafcds/cyber123123/wish/2268200108     Technology https://padlet.com/cdocsafcds/cyber123123/wish/2268211121 Technology is used in companies in a variety of ways to combat and prevent cyber attacks. As the threat of cyber attacks increase, the concern for cybersecurity tech is in large demand today. There are now many different types of technologies that companies can employ to use for their needs and defend against a wide variety of attacks.

    One such example is 2 Factor Authentication. Two-factor authentication works by confirming a user’s identity based on 2-3 different parameters. The parameters being, something they know, are and have. Add to that additional layers of information and authentication, alongside adding artificial intelligence to bolster the security. Deep learning is then used to analyze data such as logs, transaction and real-time communications to detect threats or unwarranted activities.

    Another new technology is blockchain encryption. Blockchain cyber security is one of the latest cyber security technologies that’s gaining momentum and recognition. The blockchain technology works on the basis of identification between the two transaction parties. Similarly, blockchain cyber security works on the basis of blockchain technology’s peer-to-peer network fundamentals. Every member in a blockchain is responsible for verifying the authenticity of the data added. Moreover, blockchains create a near-impenetrable network for hackers and are the best bet at present to safeguard data from a compromise.]]>     2022-08-23 02:45:22 UTC https://padlet.com/cdocsafcds/cyber123123/wish/2268211121     Perimeter Defense https://padlet.com/cdocsafcds/cyber123123/wish/2268295989 One form of perimeter defense would be the intranet. A company that the perimeter defense can be applied to are banks such as OCBC]]> 2022-08-23 04:10:05 UTC https://padlet.com/cdocsafcds/cyber123123/wish/2268295989 Intranet https://padlet.com/cdocsafcds/cyber123123/wish/2268298753 An intranet is a private network contained within an organization which is used to securely share company information and computing resources among employees.

    This allows company information to be accessed by only company employees, not allowing outsiders from accessing the network, preventing company information from being accessed by unauthorized users.


    ]]>     2022-08-23 04:13:31 UTC https://padlet.com/cdocsafcds/cyber123123/wish/2268298753     Effect of Perimeter Defense https://padlet.com/cdocsafcds/cyber123123/wish/2268299480 Perimeter defense is the first layer of defense against cyber attacks, in this case the intranet servers as the first layer of defense. The intranet restricts access to unauthorised domains such as the internet and this can prevent confidential or sensitive information from being leaked to the public]]> 2022-08-23 04:14:18 UTC https://padlet.com/cdocsafcds/cyber123123/wish/2268299480