0.protecting doc

8/16/2019 0.Protecting Doc

1/31

Document Security- how to protect your data -

M.S. MANGGALANNY – DEPUTY NETWORK OPERATION ANDSECURITY


2/31

CLASSIFICATION


3/31

Mi&it'ry

Top Secret (TS)( RED. m'teri'& )ou&* c'u+e ,exceptionallygrave damage, -irrecoer'/&e0 to n'tion'& +ecurity i1 m'*e2u/&ic&y

Secret (S)( A!ER. m'teri'& )ou&* c'u+e ,grave damage,-m'++ie0 to n'tion'& +ecurity i1 it )ere 2u/&ic&y ''i&'/&e

Con"dential (C)( #ELLO$. m'teri'& )ou&* c'u+e ,damage, o

/e ,pre%&dicial, to n'tion'& +ecurity i1 2u/&ic&y ''i&'/&e

Re'tricted (R)( REEN. m'teri'& )ou&* c'u+e ,&nde'iralee*ect', -irrecoer'/&e0 i1 2u/&ic&y ''i&'/&e

+ncla''i"ed (+)( $,ITE. u+e* 1or *ocument+ t3't *o not 3'e' c&'++i4c'tion &i+te* '/oe 'n* +ometime+ c'n /e ie)e* /yt3o+e )it3out +ecurity c&e'r'nce


4/31

L'/e&in6

!&'ine'' 'ector7 Pu/&ic( Sen+itie( Pri'te( Con4*enti'&(Unc&'++i4e*

overnment 'ector7 Unc&'++i4e*( Sen+itie( Re+tricte*(Con4*enti'&( Secret( To2 Secret

In cro++8+ectori'& 1orm'tion+( t3e Tr'9c Li63t Protoco&( con+i+t+o17 $-ite( reen( Amer 'n* Red

Se2'r'tion7 /y cla''i"cation 'n* di'clo'&re policy

Se6re6'tion7 /y p-y'ical 'eparation 'n* acce'' policy

$or.'-op7 *i+cu++ 'n* *e4ne your in1orm'tion &'/e&c&'++i4c'tion+:


5/31

/OLIC#


6/31

Acce++ Contro&

Non8*i+cretion'ry '22ro'c3 con+o&i*'te+ '&& 'cce++ contro& un*e' centr'&i;e* '*mini+tr'tion i.e. +in6&e +i6n on -SSO0 '22&ic'tion

U+u'&&y /'+e* on in*ii*u'&+ 1unction -ro&e0 )it3in t3eor6'ni;'tion 2o&icy or 'n in*ii*u'& t'+


7/31

Aut3entic'tion

5 ty2e+ o1 'ut3entic'tion in1orm'tion i+ +omet3in67

#o& .no07 PIN( 2'++)or*( mot3er=+ m'i*en n'me

#o& -ave7 *rier=+ &icen+e or ' m'6netic +)i2e c'r*

#o& are7 2'&m"4n6er 2rint+( oice( retin' -eye0 +c'n+

Stron6 'ut3entic'tion re>uire+ 2roi*in6 in1orm'tion 1rom 't &e'

"5 *i?erent ty2e+ o1 'ut3entic'tion( 1or e@'m2&e( 'omet-ingyo& .no0 2&u+ 'omet-ing yo& -ave( it+ c'&&e* t0o 1actora&t-entication

Proce*ure+ +3ou&* '22&ie* 't 'ny &ee& 'n* 'u*ite* 2erio*ic'&&y


8/31

Aut3ori;'tion

A1ter ' 2er+on( 2ro6r'm( com2uter 3'+ +ucce++1u&&y /eeni*enti4e* 'n* 'ut3entic'te* t3en it mu+t /e *etermine* )3'tin1orm'tion'& re+ource+ 2ermitte* to 'cce++ 'n* )3't 'ction+ )i/e '&&o)e* to 2er1orm -1or e@'m2&e7 run( ie)( cre'te( *e&ete( orc3'n6e0

Aut3ori;'tion to 'cce++ /e6in+ )it3 '*mini+tr'tie 2o&icie+ 'n*

2roce*ure+. It 2re+cri/e )3't c'n /e 'cce++e*( /y )3om( 'n*un*er )3't con*ition+ -inc&u*in6 oerri*in6 2roce*ure+0

Acce++ contro& mec3'ni+m+ t3en con46ure* to en1orce 2o&icie+

S3ou&* /e m'int'ine* 'n* 'u*ite* 2erio*ic'&&y

$or.'-op7 i*enti1y )3ic3 +erice+ nee* 'n AAA 'n* SSOB


9/31

ANAEENT


10/31

O2er'tin6 Sy+tem

A&& mo*ern OS 3'+ 4&e 'n* *irectory &ee& 2rotection7

A&)'y+ u+e ri63t m'n'6ement +erice

De4ne 'n* u+e u+er 'cce++ ri63t 2o&icy

Em2&oy 4&e( *irectory 'n* 4&e +y+tem encry2tion

U+e '22&ic'tion &ee& 2rotection i.e. 4&e 'n* com2re++ion

2'++)or* Some or6'ni;'tion re>uire* termin'&"*eice &ee& o1 'cce++

2o&icy7

Aut3entic'tion contro&7 4n6er 2rint( retin'( 2'++)or*"PIN

F'r* *rie 2rotection7 com2re++e* )it3 2'++)or*"PIN 'n* encry2te*)it3 Pu/&ic Key In1r'+tructure -PKI0. O1ten nee* +econ* 'ut3ori;'tion)it3 One Time P'++)or* -OTP0


11/31

Com2uter O2er'tion

U+e u2*'te* &e6'& O2er'tin6 Sy+tem -OS0 'n* '22+

U2*'te* &e6'& Anti Hiru+"M'&)'re"ire)'&& i+ ' mu+t

Perio*ic'&&y u2*'te*( c&e'nin6 '22+ tr'+3( /'c


12/31

Wor


13/31

J'c


14/31

Di+2o+'& 'n* S'nit'tion

Em2&oy +tron6 *i+2o+'& 2o&icy 'n* 2roce*ure+ in 'ny &ee& o1 'ctiity

A&& 23y+ic'& co2y in 'ny me*i' mu+t 3'e e@2ir'tion *'te( *i+c&o+ure&imit'tion 'n* 3'+ to /e 23y+ic'&&y +3re**e*"'rc3ie* in 'ave va&lt

A&& *i6it'& *'t' mu+t /e compre''ed 'n* pa''0ord protected 'n*encrypted )it3 'tronge't algorit-m ''i&'/&e /e1ore it i+ '-redde)it3 t3e mo't 'op-i'ticated *i6it'& 'ec&re 0ipe mec3'ni+m i.e. 5!2'++ NSA or DOD +t'n*'r* in or*er to com2&ete&y +'niti;e t3e *'t'

Any 2ort'/&e 'n* mo/i&ity *i6it'& *eice+ mu+t /e returne* to t3e o9c/e1ore 2er+onne& &e'e 'n*"or retirement. Inc&u*in6 +to&en( ne)*eice"e@c3'n6e*( etc. mu+t /e re2orte* to t3e 'ut3ority

Acce++ 'n* &imit'tion 1or Jrin6 Your O)n Deice+ -JYOD0 i++ue+

$or.'-op7 Do you nee* JYOD contro& 'n* 3o) to m'n'6e itB


15/31

Port'/&e Deice+

P'++)or* 2rotecte* 'ny o1 your re)rit'/&e 2ort'/&e *eice+ -'+*i+


16/31

/ROTECTION


17/31

Cry2to6r'23y7 T3eory

M'n*'tory 2rotection to tr'n+1orm u+'/&e in1orm'tion into ' 1ormt3't ren*er+ it unu+'/&e /y 'nyone ot3er t3'n 'n 'ut3ori;e*u+er t3i+ 2roce++ i+ c'&&e* encry2tion

In1orm'tion encry2te* -ren*ere* unu+'/&e0 c'n /e tr'n+1orme*/'c< /y 'ut3ori;e* u+er( )3o 2o++e++e+ t3e cry2to6r'23ic


18/31

Cry2to6r'23y7 Wor


19/31

P'++)or*7 M'n'6ement

C3'n6e 2'++)or* 2erio*ic'&&y( more o1ten /etter 'n* neer +3'r2'++)or* to 'ny/o*y 1or 'ny re'+on+

Lon6er com2&ic'te* com/in'tion i+ more +tron6er. Not e'+y toremem/er"ree'&. Un2re*icte* 23r'+e

Kee2 in +'1e +ecret 2&'ce+. No/o*yQ+ )i&& eer


20/31

P'++)or*7 Wor


21/31

ACTI3IT#


22/31

Pu/&ic Acce++

M'uic< iru+ 'n* m'&)'re +c'nnin6 c3ec<)it3 your o)n tru+te* 'n* +ecure 2rotecte* portale tool'

Je)'re o1 3i'c


23/31

Secure Tr'n+mittin6

Neer tru+t )ire&e++ tr'n+mi++ion7 J&uetoot3( DLNA( Wi8i( Ce&&u&'r I1 you 3'e to 6o )ire&e++( m'


24/31

Wire&e++ Acce++

A&)'y+ '+< Wire&e++ SSIDQ+ 'n* neer tru+t Free $IFI Acce'''&i


25/31

U+in6 Em'i&

A&)'y+ u+e 2&'in te@t not ric3 te@t -FTML( MIME etc.0 Turn o? 'uto o2en 4&e+ -'tt'c3ment( FTML0 mo*e 'n* '&)'y+ u+

&'te+t 'n* u2*'te* em'i& 'nti iru+"SPAM

Neer tru+t 'ny 'tt'c3ment 4&e+( +c'n it( '&)'y+ '+< con4rm'tio1rom t3e +en*er /e1ore you o2en it

A&)'y+ u+e em'i& c&ient 't o)n tru+te* com2uter or u+e 2ort'/&e

em'i& c&ient )it3 2ort'/&e *eice

U+e PKI -i.e. GPG0 to m'


26/31

Me++'6in6

U+e &'te+t mo+t +ecure u2*'te* me++'6in6 '22+ 'n* neer+2re'* ID to ot3er+ 2eer+ t3't youQre not tru+t

Neer tru+t un


27/31

W3i&e Sur4n6

U+e on&y FTTPS( c3ec< '&i*ity o1 CA No +cri2t( no 2o2 u2( re'* /e1ore c&ic


28/31

Tr'n+'ction

Neer u+e un+ecure*"2u/&ic 'cce++ termin'&. I1 you +3ou&* m'


29/31

Soci'& Net)or<

Neer '** unue+tion+ me++'6e to+u+2ecte* 'ccount 1or 2rec'ution 'n* i*enti4c'tion

Je con+er'tie. Limitin6 2ri'cy e@2o+ure( *eci*e 3o) muc3 to+3're. Not eery/o*y nee*+ your+

Neer u+e 1ree m'i&. U+e 2ri'te *om'in 'n* em'i& '**re++e+ or

cor2or'te 'ccount -i1 itQ+ '&&o)e*0 I1 +omet3in6 3'22en+( re2ort to '*min( /ro'*c'+t '&ert to '&& o1

your 1rien*+( 3o2e you 3'e /'c


30/31

ATM 'n* SMS

Kno)in6 &'te+t u2*'te* tec3no&o6y 'n* 2roce*ure+ toun*er+t'n* )e'


31/31

T3'n< You:

ID4SIRTII5CC RAHINDO To)er $t3 &oor

KEJON SIRIF RAYA !

Centr'& '

0.protecting doc

Documents