Information Security Team

It is known that CI professionals, watchers of all calibers, lobbyists and advocators are after valuable information within and without their companies.

Once the information is taken for granted and becomes part of the immaterial assets of the company, it is absolutely necessary to set up policies to protect the good handling of it and its protection.

Who will do it?

A team specifically dedicated to the Information security.

Next questions comes up, how to set such a team? Who will lead it?

Some aspects to take into consideration when setting up a department of information security must be taken into account.

Knowledge in information security is contained in different models currently available: among them we have those of ISO / IEC series 27000 (information security).

The knowledge relating to Management of System Information Security (ISO 27001) and the Code of Practice for the Management of Information Security (ISO 27002) should be disseminated throughout the organization. However, at the time of structuring a department of information security, companies find themselves in a worrying scenario.

1 - The information security analyst should have a high technical knowledge. I'm not referring to the certifications, I'm talking about practical knowledge and experience in the subject.

2 - Some companies insist on promoting someone internal to the IT Department to the position of Manager of Information Security. The professional would actually have a very different profile compared to that necessary to take responsibility.

As an example, I will describe the profile found among those who are promoted to the position of Manager of Information Security described on the above paragraph:

• He has experience in broader subjects such as database and software development, using security features of the very basic information.

• He does not have a history of participation in lectures / events or trainings on information security.

• He is not acquainted with international standards of information security (e.g. ISO 27002) and does not follow the bulletins about new threats on the Internet.

• He performs reading only on books related to database technologies and languages of software development.

• He has a degree on technology in database, MBA in Information Technology and certifications from Microsoft and Oracle.

- You could guess what was his role in the company? That's right! He was responsible for managing the database. Now he is the Manager of Information Security. He has lots of ground to cover up to reach the necessary profile.

3 - Some companies create a department of information security management to access computing environment. It creates users, changes passwords, sets permissions on directories etc... All this to comply with regulations or audits.

4 - Creating a department of information security subordinated to the area of Information Technology is the most common mistake organizations make.

The security area should be aligned to the legal department and audit on the organization chart. The area of information security subordinated to the director of IT functions more as technical support rather than an area responsible for the whole Management of System Information Security.

Success factors

The success of your company is not connected to the technological arsenal. There are some factors that should be considered when deciding to create a team of information security and implement a Management of System Information Security - MSIS. The first factor is to obtain approval from the organization's managers to launch the project of implementation of the MSIS.

At this stage the project team presents the priorities, objectives and scope for deploying the MSIS. It should also discuss a change in the company's organizational structure, including responsibilities, to meet the project objectives and business needs.

The output of this phase is the approval and commitment of managers to implement the Management of System Information Security.

The second factor is the development of diagnosis and analysis on the level of maturity. During this phase, we map the current situation of the organization and present a list of needed improvements in the processes of information security to set up a link between the organization's strategic planning and implementation of security systems.

The third aspect is the creation of an Interdepartmental Committee for the development of policy and standards for information security, including support of the board and / or senior management, based on guidelines from the Information Security Governance, business needs and regulations.

With the support of the CEO

The creation of a team of information security and the defining of their responsibilities depend mainly on the guidelines established by the board and / or directors. These guidelines should be documented in the policy of Information Security Governance.

Governance of Information Security will clarify for managers the company's strategic objectives in relation to information security. Down the line it will present a list of legal requirements / regulations and contractual requirements involving information security applicable to the business.

The combination of these three factors will help your company in creating a team of information security and implementation of a Management System Information Security.


Sources: ISO/IEC 27001,27002; ABNT

Checking Figures

After the earthquake that destroyed the poorest country in the Americas, the world has shown the most generous expression of solidarity in history.

In the midst of so many reports and press releases is difficult to know who did what and how much has been given.

At this link you will find the raw numbers of each country, per capita figures, and the most generous nations in relation to their GDP.

To see the details, this spreadsheet shows the numbers more accurately.

To compare with what was done in the 2005 Tsunami in the Indian Ocean, the image below shows what had been promised effectively and delivered by each country:








The numbers of the Tsunami in detail here.


Now if we compare to the spendings of the USA alone in the front in Iraq and Afghanistan, then the feeling of shame is inevitable.


Sources: Information is beautiful, the guardian,reliefweb,OEDC, costofwar

HAITI - What we can do as for now

Haiti's tragidy has shocked everyone. The Internet does its part to help.

Here's what we can do at this very moment.

Financial Aid:

Musician Wyclef Jean's website - http://www.yele.org/

Donation page in the site: https://co.clickandpledge.com/advanced/default.aspx?wid=23093

Google's special page (post earthquake Google Earth's images included): http://www.google.com/relief/haitiearthquake/

List of major organizations accepting donations: http://mashable.com/2010/01/13/haiti-earthquake-donate-help/

To be on top of things going on:

Mercycorps' twitter : http://twitter.com/mercycorps

NY Times' twitter (which follows Red Cross's, Catholic Relief Services's e Internet Haiti's)- http://twitter.com/nytimes/haiti-earthquake

CNN (same sources as NY Times' plus bloggers' and local twitter users' updates) - http://twitter.com/CNN/haiti

This blogger posts regularly: http://livesayhaiti.blogspot.com/

As all links above are in English, a traduction tool is found here: http://translate.google.com/?hl=pt#en|pt|

Do you want to act?

If you have a special skill and want to help, this ORG is coordenating efforts and accepting help of online work; it also lists some of the disaster's initial figures: http://crisiscommons.org/wiki/index.php?title=Haiti/2010_Earthquake

Ten years promoting Intelligence

The Master Program on Competitive Intelligence of Toulouse University - France, will celebrate its 10th anniversary this early january.

Among the top French Universtities proposing the Master Program on the subject, it is a pleasure to make it public on this blog the program of festivities . After all, all the consultants graviting around TIF are offsprings of M2IE - UT1!

For those interested in a Competitive Intelligence afternoon conference and debate on major topics , followed by a 'Gala Night' on the best french style and charm in a superb atmosphere, cross check jan 15th on your agendas !

Below you will find the invitation , and if you want to be updated on furhter information, just clic on the first link, between the dashed line.

To contact the responsibles for the event, clic the second link on the announce.

	CONFERENCE / DEBAT suivi d'un GALA À l'occasion des 10 ans du Master professionnel Intelligence Économique, sont organisés, et ceci pour la première fois, une Conférence/Discussio n suivi d'un Gala, le 15 janvier 2010 à Toulouse à partir de 16h. Anciens étudiants, professeurs, intervenants, professionnels du secteur, chefs d'entreprises et tuteurs de stage, sont cordialement conviés à cet événement exceptionnel. POUR PLUS DE RENSEIGNEMENTS : ------------ --------- --------- --------- --------- ------- Afin de rester informé nous vous invitons à vous pré-inscrire ici ------------ --------- --------- --------- --------- ------- Le comité d'organisation est joignable ici

World Buzz

EU New Member

Ireland has joined forces with the Lisbon Treaty Nations. Irish voters have strongly endorsed the decision, 16 months after their first vote rejecting it ,which had plunged EU reforms into deadlock. Around 67% voted "Yes", official referendum results showed. Irish Prime Minister Brian Cowen hailed a "clear and resounding" endorsement. Political leaders across the EU have also welcomed the result.

"It was a great day for Europe", said the president of the European Commission, Jose Manuel Barroso, who also urged the leaders of Poland and the Czech Republic - the only other countries yet to ratify Lisbon - to sign the treaty as soon as possible.

A new leader

-Ireland's vote to ratify the European Union's Lisbon Treaty has finally cleared the way for the creation of a powerful new president, intended to elevate the 27-nation bloc's standing on the global stage.

-But do European leaders actually want one? Ahead lies a difficult discussion about how much power and influence a new European Union president should have and whether the post should fall to a political star — like former Prime Minister Tony Blair of Britain — or one of his old school technocratic rivals.

-The leaders of member countries will decide, probably this month, and their decision could determine whether the union really seeks the bigger role it says it needs, to try to match the influence of the United States and that of rising powers like China, Russia, India and Brazil.

What is ahead of us?

1 - La Vitrine Politique - The Lisbon Treaty, which aims to streamline decision-making and reform the bloc's structures, lays down a two-and-a-half-year term for a full-time president of the European Council, the body that represents member nations.

2 - Key roles and media time - The treaty, if finally ratified by the Poles and Czechs, also mandates a single new foreign affairs chief, in charge of both policy and aid money, and a new European diplomatic corps. Both new jobs would be subordinate to the leaders of member countries. The position of commission president, held by José Manuel Barroso of Portugal, continues.

Sure Thing

Those to fill the two new posts will have a considerable chance to carve out significant roles for themselves, since they will be the most prominent faces of a collective Europe. Remember, we live a quite particular moment: both financial and natural.

- The northern hemisphere tries yet to recover from a major crisis, a delicate moment. Financial policies and aid would act like a compass needle pointing out to safe waters.

- Mother nature shows its rage in south east Asia, where aid is needed and reconstruction must take place. EU has history in the area, ans help will be sent. As seen for the past months, temperature images in the Pacific indicate we are presently at a prelude of an El Niño year - predicted to be as strong as that of 1998 - while the water at the equator line in the African coast gets colder.

Apart from the financial recovery in progress ,we are in for severe, short period climate changes all over the globe due to El Niño. And the Old World must prepare for the months ahead, which will demand aid in different local areas as a wetter, cloudier winter in Northern Europe and a milder, drier winter in the Mediterranean Sea region might just repeat itself.

Add to that, the threat of the A1H1 virus...

We live changing times indeed, be it in politics, finance or nature!

Rio de Janeiro to host 2016 Olympics

Rio de Janeiro was chosen Friday as the host site of the 2016 Olympic Games, brushing aside an unprecedented personal appeal from President Obama and the first lady on behalf of their home town of Chicago, also McDonald's headquarters, whose budgets adds up to 900 million dollars for next Olympics in London. Strong lobby indeed.

The Carnaval city beat in the last round the surprise finalist Madrid. Chicago was eliminated in the first round of voting at the meeting of the IOC in Copenhagen, and Tokyo was eliminated in the second one. In awarding Olympic bids, the IOC holds rounds of voting until one city receives a majority.

Rio, first-time-ever South American city to be chosen to host the games. This victory continues a welcome trend of acknowledging the growing importance of developing countries. The World Cup next year will be hosted by South Africa and in 2014 it will be held in Brazil.

2016 represents a tremendous opportunity for Terra Brasilis. The Olympics will give Brazilians a huge shot of self-confidence and boost the country’s tourism industry and Rio’s public transportation system. It’s also an opportunity to counter the violent imagery of drug lords, gang murders and grinding poverty realistically captured in films such as “City of God” (2002) and "Tropa de Elite"(2007). Those scenes have replaced postcard images of beaches and mountains that used to seduce people around the world.

Lula must defeat Rio de Janeiro's violent crime, which residents call it the biggest cloud over their city's postcard-perfect shot. When the world’s attention is on them, Brazilians don’t take chances. During these types of events, law enforcement is shifted from the local police, who don’t exactly enjoy a reputation for moral rectitude.

Instead, Brazil’s military runs security, sporting assault weapons and tanks. If you think Rio’s drug kingpins are crazy enough to conduct business as usual under those conditions, think it again. As 2012 host city of London has to be prepared and cope with possible terrorist attacks for the its games, Rio will have to work out the drug dealing issue. For the moment, the city will take a good look at what's being done for the London games, besides the exchange of security knowledge for large events with France.

Six and a half years of hard work will show whether COI's choice was indeed the good one - or not.

Sources: Folha de São Paulo, Wikipedia, Climatempo.com.br , Aviso.oceanobs.com, associated press, new york times, le monde, newsmap, migalhas.com, the telegraph, irishnews.

A HOT BEGINNING OF FALL

Money

Iran´s decision to switch currency accounts is now official, following a decree signed by President Ahmadinejad. Needless to say how important for oil sales. With four million barrels a day, Iran is the world’s fourth largest “black gold” producer. But it does not end there. The political side of this decision has its consequences too. But one at a time.

Asia news stated – 'Iran, the fourth largest oil producer in the world, announced its intention of replacing the US dollar with the euro in the country’s foreign exchange accounts. Iranian President Mahmud Ahmadinejad signed the decree a few days ago.

The order was issued following a decision by the trustees of the country's foreign reserves, Iranian media reported. The decision will be particularly significant in the oil field."

Taking a closer look at the figures, we see that Iran's daily 4Million barrel production represent 80% of its foreign exchanges and 50% of the government budget. And take into account the country is under economic sanctions for 30 years now.

As other gulf nations have not made the switch of currency, they stay put and observe the events; for the moment not big of a threat for the American "greenies". In fact, Iran just wants to be less dependent and thus effected by the economic sanctions issued by the U.S on the long run. As for now, Iranian Central Bank estimated to cut its interest rates for the foreign exchange reserve from 12% to 5% making it cheaper for the Bank to acquire foreign currency.

Politics

On the political side of the issue, we have Iran's alignment with European Union, supposedly easier to negotiate, both on oil and its nuclear question. Far easier to delay negotiations with a group of nations than doing it with one major power.

While Iran argues its program is strictly for the peaceful purpose of power production, the U.S. and many other western countries suspect Iran of nuclear weapons production.

Sounds familiar.

What´s next ?

If we look at current events, we might have a glimpse of whether or not we are in for rough times:

- Iran switches its currency.

- This week Al Quaeda sent threats to Germany, which will hold elections this coming Sunday. If not voting against the situation government, strikes such as those of recent years which terrified Madrid and London, might take place.

-It is known that Iran has a story of love and hate with Al Quaeda since the 9/11 episode.

-This week's UN events are of major role if we look at the big picture. Ahmadinejad speech is of great importance after September 12th announcement of euro 'friendliness'.

- The once controversially elected Iran's president, has now changed the scenario.

- Global community demands for missile installation blueprints

These facts, isolated or not, are very probable to lead to nothing threatening.

The Dark Side

However, looking back through the years, what history tells us is something else:

- Not long ago Saddam announced the same currency switch. He was also suspected of holding weapons for non-pacific purposes. Saddam, as well, had some media time to expose his opinions.

We all know what happened next. In fact it STILL goes on.

The only difference now is that there will not be necessary half a year of preparation and logistics.

It will be just a matter of crossing the border.

__________________________________________

UpDate on the 25th - Iran does have Nuke Plant

__________________________________________

Sources: Niqnaq blog, newsblaze.com, adnkronos.com, themedialine.org, wired.com, american chronicle.com, o estado de são paulo, globalgeopolitics.net, o globo.com

Oldie but goodie

The way to do Intelligence has its styles depending on cultural backgrounds, local geographic patterns and a country's history.

The way Japan does its intelligence is different from that of England, as this later is not the same as the one practiced in Germany.

It is not new that Sweden is among top countries when it comes to Intelligence Economique, or Competitive Intelligence for the Anglo-Saxons. Finland has its place on the hall of stong CI too. Now Norway is a bit different, they do their CI too, but in silence....yet they rule behind the scenes.

Scandinavian countries have a history of battles, wars, commerce and logistic. After all, life was not easy those days, as they were never too many, had to work out their own solutions to protect themselves against nearby oppressors.
They also were great navigators, there are signs of vikings all over the coast of America, both north and south ones. Commerce was a part of their culture, once they had to prepare what they needed, transport it, and stock it for the long months of winter.

La veille - the watching - is based on ODA principle: observe, direct, act. And it has been like this since men started their battles for all different reasons. Vikings did no different.

We then start to see this intelligence heritage puzzle fitting into the big picture. But this is based on academic analysis, simple A + B reasoning with the aid of Geopolitics which leads us to plausible conclusions.

Then the confirmation of all above paragraphs comes in a form of a simple set of laws. True ones, today part of scands' ties with their past.

It is a small postcard, that has been hanging on my living room wall for over five years, souvenir of a lovely trip to Norway.

In fact I had never seen it that way. I thought it was cool, funny, perhaps clever way to tell how it was done back on those days.... But then I read it again tonight and saw it in a different way...

Those old Scandinavian warriors knew it all about intelligence! After all, they were the ones responsible for their own conquests, be it in commerce or the batte field. The observation of the world, direction for further local improvements and all the plans of action to execute the tasks at stake have always been part of their lives.

It only proved that Intelligence is, above all, "un état d'esprit". So, here its, a set of rules that explain why scand's are so good on doing Intelligence, as it has been around for well over a thousand years!

VIKING LAWS

1 - BE BRAVE AND AGGRESSIVE
Be direct
Grab all opportunities
Use varying methods of attack
Be versatile and agile
Attack one target at a time
Don't plan everything in detail
Use top quality weapons

2 - BE PREPARED
Keep weapons in good conditions
Keep in shape
Find good battle comrades
Agree on important points
Choose ONE chief

3 - BE A GOOD MERCHANT
Find out what the market needs
Don't promise what you can't keep
Don't demand overpayment
Arrange things so that you can return

4 - KEEP THE CAMP IN ORDER
Keep things tidy and organized
Arrange enjoyable activities which strengthen the group
Make sure everyone does useful work
Consult all members of the group for advice

Voilà, if we put these simple laws into today's economic perspective, we have what to work with.

Amazingly compatible. Oldie but goodie !!!
Things have indeed been the same for quite a long time!

These laws made me curious to find out if we would obtain the same by checking out the code or laws of the Samurai...

But that would be a subject for another post!