Essay On Cybersecurity

The NAIC has stepped up their operations in the area of cybersecurity, evidenced not only by the Bill of Rights, but also by an increase in the 2016 budget to support an internal security team responsible for responding to and preventing cybersecurity data breaches.

The Information Technology Sector is the most important CNI element Businesses, governments, academia, and private citizens are increasingly dependent upon Information Technology Sector functions. These virtual and distributed functions produce and provide hardware, software, and information technology systems and services, and - in collaboration with the Communications Sector. The importance of technology within our generation has increased and cyber-attacks have been in

Cybersecurity attempts to assure the protection of assets, which includes data, desktops, servers, buildings, and most importantly, humans. The goal is to protect data while in transit and when stored. Countermeasures can be put in place in order to increase the security of data. Some of these measures include, but are not limited to, access control, awareness training, audit and accountability, risk assessment, penetration testing, vulnerability management, and security assessment and authorization.

Experienced professional with a developed focus on Governance, Risk Management, and Compliance (GRC). Successfully served in multiple roles of escalating responsibility and expertise during a 20+ year career working directly with Information Security Systems Technologies. For example; administration, support, engineering, architecture, analyst, and management teams. A hybrid acumen and heightened ability to identify, analyze, understand, communicate, and execute, while balancing technical complexities with business requirements. Strives to infuse added-value and is extremely accomplished in achieving both short-term objectives & long-term company goals through relationship building and strategic planning. A critical thinking, hands-on, Technologist with detailed knowledge of related business intricacies.

One of the biggest issues regarding cybersecurity, is how technology is rapidly and constantly evolving. The traditional approach has been to focus most resources on the most crucial system components and protect against the biggest known threats, which necessitated leaving some less important system components undefended and some less dangerous risks not protected against (Rouse, 2010). Adam Vincent, CTO-public sector at Layer 7 Technologies (a security services provider to federal agencies including Defense Department organizations), describes the problem (Rouse, 2010):

There is a growing realization that cybersecurity requires budgetary commitment, sincere collaboration, and a solid plan. If companies and government can work and contribute money a bright future

Cybersecurity issues are not something just for the IT department to decipher and manage. Board of directors and

Defending the world against those that wish to cause harm to people through the use of cyber warfare would define a successful Information Assurance Professional. Actively battling the “evil” of the cyber world is the life of Information Assurance professional, from making sure that sensitive data stays out of the hands of the advisory to actively defending against a denial of service attack, and everything in-between. Let us journey to through what it takes to make it in the world of Information Assurance.

Cybersecurity is one of many important elements when it comes to information security and how to protect it. From the laws and regulations to who is ultimately responsible and the one to assume responsibility when breaches take place. Whether it is the government or the private sector, someone has to take charge because we all have a vested interest in protecting our families, our businesses and our nation’s security in cyberspace.

Traditionally, IT (Information Technology) security focused on securing the IT assets within the organization’s IT framework. However, with the advent of smart mobile devices, cloud computing, and remote connectivity, the IT landscape has changed dramatically in the last few decades. With these changes, the frequency of attacks by cyber criminals has increased as well. We constantly hear news reports of large-scale cyber attacks targeting financial, government and healthcare organizations. Moreover, the type of attacks have evolved to become more sophisticated and untraceable, making it difficult for security analysts to keep up with the every changing technological demands to successful prevent, analyze and thwart security attacks. This has now led many security experts to believe that having an effective defense mechanism in place is a much viable option than to be reactive to threats. This also makes sense from a business perspective. Companies want their IT investments to further their business goals and not to be constrained too much by focusing heavily on IT security, which could potentially lead to an increase in operational costs to tackle security issues.

One of the most problematic elements of cybersecurity is the quickly and constantly evolving nature of security risks. The traditional approach has been to focus most resources on the most crucial system components and protect against the biggest known threats, which necessitated leaving some less important system components undefended and some less dangerous risks not protected against (Rouse, 2010). Such an approach is insufficient in the current environment. Adam Vincent, CTO-public sector at Layer 7 Technologies (a security services provider to federal agencies including Defense Department organizations), describes the problem:

The ten cyber security threats in the IT world are boosts in mobile drives and in security tasks, increased C-suite targeting, growing use of social media that will contribute to personal cyber threats, being already infected, and everything physical can be digital. This paper discusses what these threats are, how to defeat and/or demonstrate proficiency in defeating the cyber threats, and the rising importance of cyber security at the work place.

With the quick growth rate of technology, cyber security is being utilized by millions of people every day. Furthermore, this industry will never die and will always have a constant stream of demand. The appealing sector of cyber security is demonstrated on what the value of a 10,000-dollar investment is now worth (see Exhibit A). From my perspective, cyber security is one of the few durable trends that investors can benefit from due to the booming technology industry. Moreover, with the increase of hacking incidents in the past years, the importance of cyber security is becoming vital for businesses and households (see Exhibit B). Thus, cyber security seemed like a logical and safe place to invest my funds.

Unfortunately, with the rise of interests and increasing in exports it was only a matter of time before the industry of aerospace, defense, and security was going to experience cybersecurity threats. In this industry, vulnerabilities such as compromised Personally Identifiable Information (PII), Distributed Denial of Service (DDoS) attacks on the critical infrastructure to attacks such as economic espionage exist. “Agencies and companies are facing significant and ongoing cybersecurity and safety threats, while at the same time confronting nontechnical issues including budget uncertainty, an evolving national strategy, and how, when, where, and if information can be shared among impacted agencies and industries” (Aerospace & Defense

Americans are becoming heavily dependent on modern day technology, which produce more vulnerability to cyber-attacks such as security breaches. Cyber security, also known as information technology security, is information security as applied to computers and computer networks. It is designed to protect networks, programs, computers and data from attacks. These attacks can lead to damages or unauthorized access to data. Computer security also includes protection from unplanned events and natural disasters. Cyber security main function is to guard computers, networks, programs and data from unintended or unauthorized access, change or destruction.