Ncc Group Plc · LSE:NCC
Ncc — Investor Presentation (May 2005)
13 slides from Ncc's investor presentation, May 24, 2005
Slide 1: Information Security Arms Race
Information Security Arms Race John Redeyoff NCC Group plc 24 May 2005
Slide 2: Agenda
Agenda • The nature of the threat • The cost to business • The current market • Myths and realities • The evolving nature of the threat • Corporate governance • The information security jigsaw • Key information security questions • Trends 2 Copyright © 2005 NCC Services Ltd. All rights reserved.
Slide 3: The nature of the threat
The nature of the threat Viru s 16 M alert: ay 2 So 005, ber sp Silic read le n on .c s ha d St o o m te m ple Feare ail a ta o n 3 10,000 Peo D LexisNexis rs 05, Reute 12 April 20 $350,000 Citiban k theft victims Britain 'gullible and car probe eless' rob Ja s high -tech b 12 Apri l 2005, Silicon.c
Slide 4: The cost to business
The cost to business • Proportion of UK businesses experiencing a security incident in 2004*: • All security incidents Large businesses / Large businesses – 94% All businesses / All businesses – 74% Accidental • Malicious incidents / Large businesses – 94% / All businesses – 84% Malicious • Accident
Slide 5: The cost to business (cont'd)
The cost to business (cont’d) Overall* Large Business* Disruption to business £5,000-£10,000 £50,000-£150,000 Over 1-2 days Over 1-3 days Time spent responding £500-£1,000 £3,000-£6,000 to incident 2-4 man days 10-20 man days Direct cash spent responding £1,000-£2,000 £5,000-£10,000 to incident Dire
Slide 6: The current market
The current market • UK businesses are spending more on information security than ever before* / Estimated information security spend 2004: £2.1bn and a growing market** / Estimated information security consultancy spend 2004: £210m per annum *** • By sector **** / 50% - public sector / 25% - financ
Slide 7: Myths and realities
Myths and realities Myth Reality • Networks are becoming harder • Attacks are becoming more to attack sophisticated • IT Applications are becoming • Most applications provide all the safer and more impenetrable vulnerabilities needed to compromise a server • Remote working is intrinsically • Remote
Slide 8: The evolving nature of the threat
The evolving nature of the threat • New techniques… such as ‘phishing’ and ‘pharming’ • New vulnerabilities introduced with new systems and applications • Perimeter no longer a valid concept: / 8.3m in the UK regularly working from home / People working in the local coffee shop / Blackberries, smart
Slide 9: Corporate governance
Corporate governance • Management of information security business continuity planning now regarded as key element of sound corporate governance • 75% UK organisations state information security either ‘high’ or ‘very high’ priority for senior management / board* • Organisations spending 3% of IT bu
Slide 10: The information security jigsaw
The information security jigsaw • Management of information security is NOT about technology • IT Security is multi faceted • Best considered as a Vulnerability Jigsaw: / Architecture: the correct technology in place / Policies: appropriate policies & procedures in place / Awareness: ensuring staff
Slide 11: Key information security questions
Key information security questions • Key questions each organisation should answer: / Does information security have board level responsibility and visibility? / Have we carried out a risk analysis which accurately identifies our level of exposure? / Do we have a business continuity plan… and have w
Slide 12: Trends
Trends • Breakdown of traditional network perimeter • Remote access • Applications • Tool-based automated testing • Identity theft • Involvement of organised crime • Outsourcing and offshoring • New technologies (eg; VOIP) 12 Copyright © 2005 NCC Services Ltd. All rights reserved.
Slide 13: Summary
Summary • Threat is real with real cost • Threat is evolving – it really is ‘an arms race’ • Business is starting to take threat seriously • Corporate governance issue • Need to address information security on all fronts 13 Copyright © 2005 NCC Services Ltd. All rights reserved.