CATTS-SIRT Executive Education Framework

Anti-Cyber Crime Team Training Services

Integrates information protection expertise with team training programs.
These programs include lively presentations and interactive workshops.
Information Protection Overview for Execs (EIPO)
Overview

Our orientation session is designed for non-technical executives and professionals who need
to understand key business issues about effective information protection and network security.

This introductory course uses real world examples to show how competitors or cyber-criminals can compromise data integrity or disrupt your network’s availability and reliability. It anchors
our team training series with a focus on people, policy and process.

Focus

Participant breakouts reinforce both risk assessment and mitigation methods in a straight-forward, common sense format with a take-home executive risk assessment checklist and policy template.

Delivers overview and guidelines for preparing, responding to & follow-up after digital disruptions.

Learning Objectives

What you will learn:

Are we at risk?

Who and what are the threats?

How do we prepare for the inevitable?

How do we determine if we have been attacked?

How do we stop an attack in progress?

What do we do?

Who do we notify?

How do we recover from an attack?

Outline

Section	Topic
1	Course Objectives & Overview / CBS "Cyber Thief" Video (15 Min)
2	Cyber Crime: A Most Unnatural Disaster
3	An Ounce of Prevention – AVOID *being victimized!*
4	Breakout-1: Assessing Risks – SIRT Preparation & Orientation
5	Prudent Protection Practices & Safeguards
6	A Pound of Cure – Detection and Correction
7	Breakout-2: Responding to "Cyber Attacks" – Simulated Digital Disruptions
8	Forensics & Dr. Quincy, ME – Root Cause Analysis
9	Q&A Review with Overall Evaluation

Length - 1/2 Day

Materials – Workbook, Workshop Guide & Information Protection Policy Templates

Netspionage Survey
Risk Factors - YES or NO

___1. Operations in more than one continent?
___2. Distributed & decentralized computer & network infrastructure?
___3. Internet connectivity generally available to the workforce?
___4. National / international media profile?

___5. National Security Threat List industry?
___6. Multinational operations contribute substantial (40+%) revenues
___7. High level of competitor collaboration?
___8. Multiple significant foreign joint ventures?

___9. Two or more major domestic joint ventures?
___10. Major acquisition / merger within last 12 months?
___11. Recent or projected downsizing?
___12. Workforce turnover exceeds industry average?

___13. Workforce composed of 40+% contractors, temporaries or consultants?
___14. Operations or presence in High Risk Areas?
___15. "High Tech" product(s) comprise significant portion of annual revenues?
___16. Breakthrough product(s) and/or services?

___17. Benchmark level business processes?
___18. Top 10% industry ranking?
___19. No competitive intelligence program?
___20. Extensive reliance on computers in product design, development or delivery?

___21. Knowledge-based business?
___22. Limited physical security program?
___23. No formal program for safeguarding proprietary information?
___24. Prior attempts within industry to steal secrets?

___25. Past attempts to steal information from corporation?
___26. R&D represents substantial portion of revenues or R&D exceeds industry average?
___27. Partnering is a major aspect of the business?

___28. Overseas business partners?
___29. Manufacturing is totally or significantly outsourced?
___30. No formal information systems security program?
___31. Significant e-business or e-commerce operations?

HIGH Risk if Over 50% YES . & . LOW Risk if YES Under Nine

MMIS & MIS Advisory Council (MISAC)

Metro State College of Management

Problem Formulation and Data Presentation

Several MMIS courseware offerings might be of interest
to PACIBER @ UH-Manoa: www.cba.hawaii.edu/ciber/home.htm

Both KU @ Lawrence, KS & UW @ Madison, WI are part of this network:

http://ciber.centers.purdue.edu/local_cibers/main.html

Also preview: www.kelley.indiana.edu/ardennis/general/research.htm

http://jws-edcv.wiley.com/college/tlp/supplements/0,9842,BUSC-ISC-IS60C_0471237981_BKS,00.html#instructors

The Absolutes of Leadership by Philip B. Crosby

Note: MISD 671 Course uses
Decision Traps as its framework . . . good choice!

Paperback - 280 pages Reprint edition (October 1990)
Fireside; ISBN: 0671726099 ; Dimensions (in inches): 0.76 x 8.44 x 5.51

Source: www.metrostate.edu/com/coursedg.htm#gmis

______________________________________________
MISD 671 Problem Formulation and Data Presentation
This course provides students with techniques and strategies to work on complex business problems
while exercising strong critical thinking skills. It also helps them develop potential solutions.

This course then focuses on how to take the results of students' professional work and present
complex material in a manner that helps them clearly explain and market their information.

Techniques in data mining, client/server information management, visualizations
and world wide web (www) integration are covered.

Prerequisite:
MISD 661 Management Information Systems or equivalent . . . [Need examples]

The ten most common decision traps:

. . . According to J. Edward Russo and Paul Schoemaker:

Plunging In -- Information is gathered and conclusions are reached
without understanding the critical point of the issue.

Frame Blindness -- Solving the wrong problem because
of a created mental framework for your decision.

Lack of Frame Control -- Failing to define the problem
in multiple ways or being influenced by previous frames.

Overconfidence in Your Judgment -- Failing to collect information
because you are sure of your assumptions and opinions.

Shortsighted Shortcuts -- Relying on "rules of thumb,"
such as trusting convenient facts and readily available information.

Shooting From the Hip -- Making spontaneous decisions
rather than following a systematic procedure.

Group Failure -- Failing to manage the group decision-making process
because of the assumption that the group will make good decisions.

Fooling Yourself About Feedback -- Failing to accurately interpret
the evidence from the past.

Not Keeping Track -- Relying on experience, and failing to keep track
of decision results needed to evaluate those decisions.

Failure to Audit the Decision Process -- Failing to create
an organized approach to understanding your own frame.

MMIS-DSP Contacts
@ http://db.metrostate.edu/directory.asp?dept=210319&cat=Faculty|

MISAC tactical "tips" on adapting for www.drii.org strategies . . .
& ongoing re-certification programs @ www.drii.org/recertify.html#faq

1 - BCPA's new board @ www.bcpa.org may consider collaborating in design or validation
of a "customized version" for Minnesota-based business continuity planners!

The mission of BCPA is to provide a professional and educational environment
for the exchange of experience, dissemination of information, professional
growth, and for added value of mutual interest to the membership . . .

2 - ACCTTS-LLC cancelled its strategic alliance with Salus International, Inc.
to participate in "Crisis & Consequence Management" training conferences . . .

FYI - Both principles are on adjunct faculty @ Oklahoma University
and have access to resources of www.mipt.org in Oklahoma City, OK. . .

This reinforces proactive efforts to expand and deliver effective
MSP InfraGard Chapter Programs with www.mhta.org member support!

Ref: www.iwar.org.uk/infragard/local-infragard-chapters.htm#msp
[Preview "Local Events" for 13-Nov-2001 shifted to 8-Jan-2002]

3 - www.Netbriefings.com supported MSP-InfraGard collaborators
to co-produce a demonstration webcast available @ www.iwar.org.uk/infragard/wmd-threats.htm

4 - Adult learning workshops for this process may adapt eConsensus or GroupSystems.com
Web-based anonymous surveys & methodologies for operational risk assessments!
@ www.telecommuter.org/

See CCF-2K background: www.hicss.hawaii.edu/HICSS_34/tutorials.htm#t15

6 - CiberPAC-Net supports shared "knowledge management"
for Anti-CyberCrime Team Training Services [ACCTTS]

ciberpac-net· PACnet - Professional Association Collaborative Network

[Derived from pre-MnIPS.org & PAXlinx networking projects]
http://groups.yahoo.com/group/ciberpac-net

Source: MMIS-MISAC_Problem Formulation and Data Presentation.rtf

MSU-MISD Courses MMISupplement.htm