cyber resilience @ dundee & angus college

Cyber Resilience @

Kristoffer GetchellHead of ICT Services

Contents

• Background• The College View of Resilience / Cyber Security • The Current Landscape, aka

…The Good…...The Bad......The Ugly...

• Future Objectives• Q+A

Background

Background

KingswayGardyne

SaltireArbroath

KirriemuirForfar

Montrose

3 Main Campuses

4 Satellite Campuses

Background

1000 Staff

7000 Learners

College View of Resilience

Business ContinuityCampus ServicesStaff Availability

BackupsComms Issues

Hardware Damage

College View of Cyber Security

• Acceptable Use• Data Protection• Mobile Device• Records Management• ICT StrategyPolic

y

• ICT Determines Risk• ICT Defines Solution• ICT Takes Responsibility

Proc

ess

…The Good...

• Buy in from the BoM / Senior Leadership Team• General Awareness of the Threats• Security Mindset features in Strategy Documents– Organisation Development Training– Learner Internet Safety Days– Frequent Reminders– Password Management– Approval to Conduct Phishing Exercises

…The Bad...

• General Awareness of the Threats

• Organisation Development Training• Learner Internet Safety Days

• Password Management

• Approval to Conduct Phishing Exercises

…The Bad...

• General Awareness of the Threats

• Organisation Development Training• Learner Internet Safety Days

• Password Management

• Approval to Conduct Phishing Exercises

…The Ugly...

• It has happened to us

…The Ugly...

• It has happened to us

TWICE

Future Objectives

• Key Objectives– Move the conversation on

– Educate our users

– Create a culture of openness

– Embed Cyber Security / Cyber Resilience ethos

Future Objectives

• Key Objectives– Move the conversation on

– Educate our users

– Create a culture of openness

– Embed Cyber Security / Cyber Resilience ethos

Q+A