Information Security 365/765, Fall Semester, 2014

Course Instructor, Nicholas Davis, CISSP, CISALecture 1, Course Introduction

Welcome ToWelcome ToInformation Systems 365Information Systems 365

Lecture One, AgendaLecture One, Agenda• Instructor: Nicholas Davis• Review syllabus• Discuss course style• Review expectations• Let’s get to know each other• Watch a video, get assignment 1

04/10/23 UNIVERSITY OF WISCONSIN 2

The Chocolate BarThe Chocolate BarPromisePromise

• We all need energy to learn and participate

• The most successful people are those who have knowledge outside their core area of expertise

• In addition to Information Security, we are going to learn about various chocolate bars, this semester

• A new chocolate bar to sample in many classes04/10/23 UNIVERSITY OF WISCONSIN 3

Today’s Chocolate BarToday’s Chocolate BarSnickersSnickers

In 1930 Mars introduced Snickers, named after the favorite horse of the Mars family.

The Snickers candy bar consists of nougat, peanuts, and caramel with a chocolate coating. The bar was marketed under the name "Marathon" in the UK and Ireland until 19 July 1990, when Mars decided to align the UK product with the global Snickers name.

04/10/23 UNIVERSITY OF WISCONSIN 4

Meet YourMeet YourCourse InstructorCourse Instructor

Nicholas DavisMBA, Information Systems Analysis & Design, UW-Madison, 1998Work experience in both private and government sectorsTeaching experience at several colleges and universitiesCurrently work in the UW-Madison IT Security group at DoIT

04/10/23 UNIVERSITY OF WISCONSIN 5

Review SyllabusReview SyllabusThis course is designed to provide students with an introduction to the processes, technologies, tools and methods used by Information Security professionals in the enterprise environment. This is an Information Systems / Business course, not a Computer Science course. Let’s discuss why this matters.

04/10/23 UNIVERSITY OF WISCONSIN 6

Course ContentCourse ContentThe course materials and lectures presented will focus on the three core pillars of Information Security: Confidentiality, Integrity and Availability of enterprise data and associated services. While this course was developed with the Information Systems student in mind, many of the technologies, tools and concepts covered are tangentially applicable to other functional areas of business, such as Accounting Control Systems and Financial Auditing.

04/10/23 UNIVERSITY OF WISCONSIN 7

Course ContentCourse ContentThe course exposes students to situations in which sound technical knowledge, business analysis acumen and informed opinion will be used to successfully complete readings, short written assignments, the exam, and team project. An emphasis will be placed on leveraging our diverse class environment to encourage students to openly and actively participate, develop and share their individual opinions and experiences.

04/10/23 UNIVERSITY OF WISCONSIN 8

Course BreakdownCourse Breakdown• Introduction: Security Trends• Information Security and Risk Management• Access Control• Security Architecture and Design• Physical and Environmental Security• Telecommunications and Network Security• Cryptography• Business Continuity and Disaster Recovery• Legal, Regulations, Compliance and Investigations• Application Security• Operations Security

04/10/23 UNIVERSITY OF WISCONSIN 9

Upon CompletingUpon CompletingThis CourseThis Course

• Have a solid command of the processes and technologies employed in enterprise Information Security

• Have an in depth understanding of the breadth of the Information Security field and how Information Security principles are applied in the enterprise environment.

• Have an awareness of the current legislative and industry compliance challenges facing corporate IT infrastructure management

• Possess the knowledge necessary to create and present a comprehensive Security Audit, according to industry standards

• Possess the knowledge necessary to pass the CISSP exam, the most widely recognized IT Security certification

04/10/23 UNIVERSITY OF WISCONSIN 10

Course GradingCourse GradingExamsExams

Exams, 50 points each (total 25% of final grade, each is 12.5% of final grade.) There are two exams in this course. The exam will be multiple choice and true/false format.

04/10/23 UNIVERSITY OF WISCONSIN 11

Three Written AssignmentsThree Written AssignmentsThree written assignments, valued at 10% each, of final grade, total of written assignments is 30% of final grade. Written assignments serve several purposes. •Demonstrate that you absorbed material•Help build your ability to convey technical subjects in clear terms•Provide balance to exams

04/10/23 UNIVERSITY OF WISCONSIN 12

Course GradingCourse GradingTeam PresentationTeam Presentation

In class team Powerpoint presentation on security breach. 100 points (25% of final grade.) The team will receive one grade for their overall work on the project and that grade will be replicated out to each individual team member.

04/10/23 UNIVERSITY OF WISCONSIN 13

Course GradingCourse GradingIn Class ParticipationIn Class Participation

In class participation 80 points (20% of final grade.) The sharing and exchange of ideas in person, is a valuable learning tool. Don’t be afraid to speak up and share your thoughts and opinions. Doing so will enhance the in-class learning experience for everyone!04/10/23 UNIVERSITY OF WISCONSIN 14

A Note About AttendanceA Note About AttendanceAttendance is half of your participation grade, so coming to class is a good idea.

We have a sign-in sheet, which will be passed around, every class.

04/10/23 UNIVERSITY OF WISCONSIN 15

““80% of life is showing up”80% of life is showing up”

I made the statement years ago which is often quoted that “80 percent of life is showing up”. People used to always say to me that they wanted to write a play, they wanted to write a movie, they wanted to write a novel, and the couple of people that did it were 80 percent of the way to having something happen. All the other people struck out without ever getting that pack. They couldn’t do it, that’s why they don’t accomplish a thing, they don’t do the thing, so once you do it, if you actually write your film script, or write your novel, you are more than half way towards something good happening. So that I was say my biggest life lesson that has worked. All others have failed me.

04/10/23 UNIVERSITY OF WISCONSIN 16

Course GradingCourse GradingSummarySummary

Summary of grading Total possible points Percent of final grade

Exam 1 50 12.5%

Exam 2 50 12.5%

Assignment 1 40 10%

Assignment 2 40 10%

Assignment 3 40 10%

Team presentation 100 25%

Class participation 80 20%

--------------------------------------------------------------------------------------------Total 400 100%

04/10/23 UNIVERSITY OF WISCONSIN 17

Course GradingCourse GradingWhy Use This Method?Why Use This Method?

• Balance between exams, presentations, participation and written assignments

• Helps ensure consistent learning, as opposed to cramming at the last minute

• Motivates class attendance and participation

• Results in better long term retention of material

04/10/23 UNIVERSITY OF WISCONSIN 18

Final GradesFinal Grades

Grading Scale Letter Grade GPA Percentile

380-400 Points A 4.0 95% to 100%360-379 Points A/B 3.5 90% to 94%340-359 Points B 3.0 85% to 89%320-339 Points B/C 2.5 80% to 84%300-319 Points C 2.0 75% to 79%280-299 Points D 1.0 70% to 74%0-279 Points F 0.0 0% to 69%

04/10/23 UNIVERSITY OF WISCONSIN 19

Academic MisconductAcademic MisconductSummary: Be honestSummary: Be honest

Academic misconduct is a serious issue. If you are not already familiar with the UW-Madison standards and polices surrounding academic misconduct, please thoroughly read the following information: http://www.wisc.edu/students/saja/misconduct/UWS14.html

Summary point 1: Be honestSummary point 2: Bad things happen when you are dishonest

04/10/23 UNIVERSITY OF WISCONSIN 20

Instructor’s PromisesInstructor’s PromisesTo StudentsTo Students

Provide the students with a quality learning experience, enhancing your knowledge and skill-set in the area of Information Security. If for any reason you are displeased with the course for any reason, you are strongly encouraged to let the instructor know of your concerns, so that we can make beneficial changes in real-timeReturn your assignments and exams in a timely mannerBe available for office hours at times which fit best into your scheduleWork hard to ensure that you have a valuable learning experience, in an open, fun and relaxing classroom environment

04/10/23 UNIVERSITY OF WISCONSIN 21

Instructor’s RequestsInstructor’s Requestsof IS 365/765 Studentsof IS 365/765 Students

Attend class, except in the case of emergenciesBe engaged in the subject matter being taught, read class materials. ask questions, share opinions, etc.Be polite to your peers in the classroomDon’t engage in academic misconductBe open and honest with the instructor

04/10/23 UNIVERSITY OF WISCONSIN 22

Let’s Get To KnowLet’s Get To KnowEach OtherEach Other

When I was a student at UW-Madison, I met my best friends in classNotice, you do have FERPA rights, so you are not required to participate in this exerciseLearning opportunity: What is FERPA?NameWhere you are fromYour hobbiesYour favorite foodWhy you chose to take this class

04/10/23 UNIVERSITY OF WISCONSIN 23

QQuestion & Answer uestion & Answer SessionSession

You are my customer, and therefore deserve the very best teaching experience possible. After all, you are paying for itDo you have questions for me?Do you have comments or concerns about the material covered today?How can I best help you ensure success in this course?Are you ready for a really fun semester?

04/10/23 UNIVERSITY OF WISCONSIN 24

Thoughts AboutThoughts AboutThis OpportunityThis Opportunity

You are only a college student one time if your lifeYou are fortunate to be here, and UW-Madison is fortunate to have you hereYou are smart people, capable of amazing thingsYou can all be highly successful in this classLet’s make the most of this opportunity04/10/23 UNIVERSITY OF WISCONSIN 25

Note Taking is Not Note Taking is Not RequiredRequired

Note taking is old fashioned!Why force you to make 30 individual copies of the material covered in class?Save that energy for class discussions!Instructor will send you copies of the Powerpoint slides and reading material by email, after class, each session.

04/10/23 UNIVERSITY OF WISCONSIN 26

You Are ImportantYou Are ImportantYou Are the FutureYou Are the Future

You are ALL smart people, otherwise you would not be at the University of Wisconsin-MadisonYour thoughts and ideas are good and they matterYour age is not an indicator of your abilityI am lucky to have you in this class!

04/10/23 UNIVERSITY OF WISCONSIN 27

The Key To Success IsThe Key To Success IsRelating To Subject MatterRelating To Subject Matter

Textbooks are boring and abstractTo do well in class, the students must care about the materialIn order to care about the material, it must seem relevant and applicableI will send follow up reading material after each lecture, in case you found anything confusing, or want further detail.Exams are based only on material presented in class

04/10/23 UNIVERSITY OF WISCONSIN 28

Advice for College Students Advice for College Students Abroad Abroad

Be Aware of Foreign Be Aware of Foreign Intelligence ThreatIntelligence ThreatStudents are targets

Being able to relate to subject matter will help you learnShriver Case: A Textbook Case of Recruitment

04/10/23 UNIVERSITY OF WISCONSIN 29

No Discrimination In theNo Discrimination In theClassroomClassroom

This is an Information Security classMany American examples of computer espionage, focus on a threat from ChinaEVERY country has spies. The US spies, just like China does, just like France does, just like Russia does, just like Germany doesThe following example happens to involve China04/10/23 UNIVERSITY OF WISCONSIN 30

Our Classroom Does NOTOur Classroom Does NOTTolerate PrejudiceTolerate Prejudice

All students deserve respect!Prejudicial comments about another country’s culture are not fitting for intelligent students to make, and will not be tolerated in the classroomWe are all friends in this class

04/10/23 UNIVERSITY OF WISCONSIN 31

Let’s Watch the StoryLet’s Watch the StoryWritten Assignment #1Written Assignment #1Don’t worry about taking notes, you can watch the video again, laterhttps://www.youtube.com/watch?v=TEYRLDvJaxohttps://www.youtube.com/watch?v=Fw8ZorTB7_o

04/10/23 UNIVERSITY OF WISCONSIN 32

Keep the Following Keep the Following QuestionsQuestionsIn MindIn MindHow do foreign intelligence

officers routinely interact with students?

What can students do to protect themselves while studying abroad?

04/10/23 UNIVERSITY OF WISCONSIN 33

Written Assignment #1Written Assignment #1Due September 11thDue September 11th

You may choose to answer each question explicitlyOr, you may choose to write a more general essay, using the provided questions as a general guideI prefer the second option

04/10/23 UNIVERSITY OF WISCONSIN 34

A Few Last ThingsA Few Last Things

Information Security is an exciting area, and a great class to talk about during job interviews, since people interested in IT Security are in high demand.You are the customer!If you have any difficulties, please do not be afraid to ask for help. I can meet with you at any time.You matter a lot to me. Please provide timely, open and continual feedback.

04/10/23 UNIVERSITY OF WISCONSIN 35

Contact InformationContact Information

Nicholas Davisndavis1@wisc.eduTel. 608-347-2486

04/10/23 UNIVERSITY OF WISCONSIN 36

04/10/23 UNIVERSITY OF WISCONSIN 37

04/10/23 UNIVERSITY OF WISCONSIN 38

04/10/23 UNIVERSITY OF WISCONSIN 39

04/10/23 UNIVERSITY OF WISCONSIN 40

04/10/23 UNIVERSITY OF WISCONSIN 41

04/10/23 UNIVERSITY OF WISCONSIN 42

04/10/23 UNIVERSITY OF WISCONSIN 43

04/10/23 UNIVERSITY OF WISCONSIN 44

04/10/23 UNIVERSITY OF WISCONSIN 45

04/10/23 UNIVERSITY OF WISCONSIN 46

04/10/23 UNIVERSITY OF WISCONSIN 47

04/10/23 UNIVERSITY OF WISCONSIN 48

04/10/23 UNIVERSITY OF WISCONSIN 49

04/10/23 UNIVERSITY OF WISCONSIN 50

04/10/23 UNIVERSITY OF WISCONSIN 51

04/10/23 UNIVERSITY OF WISCONSIN 52

04/10/23 UNIVERSITY OF WISCONSIN 53