Embed Size (px)
Citation preview
From Complacency to Catastrophe
Get armed with the emerging BCM/ISMS Trends and Statistics
Presenter: En. Abdul Halim Md Lassim
CEO, HeiTech Managed Services Group
Pacific Ring of Fire
Is this how your company Disaster Recovery Plan is?
94% of responding organizations experienced some level of disruption over the past 12 months.
020406080
100120140160
* Source: Business Continuity Institute 2010
Major causes of invocations
0%
10%
20%
30%
40%
50%
2006 2007 2008 2009
Hardware
Power
Flooding
Data Corruption
Communication
*SunGard Availability Services Top 3 Customer Invocation CausesAn invocation occurs when a SunGard Availability Services customer calls upon SunGard to action its Business Continuity, Technology Recovery or
Workplace Recovery arrangements
Business Functions and RTOs 2010 Risk and Security Survey n=133
30%
33%
17%
11%
6% 3%
Recovery Time Objective (RTO)
Less than 4 hours
4 hours to less than 24
hours
24 hours to less than 72
hours
72 hours to less than 1
week
1 week to less than 1 month
1 month or more
In a 2010 report, 63% of survey respondents said the RTOs for their mission-critical business
processes were <24 hours.
Source: Gartner, “Ten Best Practices for Creating and Maintaining Effective Business Continuity Management Plans” Roberta J. Witty, Les Stevens , 8 February 2010
What Part of Your IT Disaster Recovery Management (DRM) Program Needs the Most Improvement n=70
Source: Gartner, “Ten Best Practices for Creating and Maintaining Effective Business Continuity Management Plans” Roberta J. Witty, Les Stevens , 8 February 2010
Worldwide ISMS Certifications
North America105
South America66
Africa12
Asia
5425
Europe1429
Australia30
*Data: http://www.iso27001certificates.com
ISMS Certifications in Asia
World Ranking Country 2010 to date
(Oct’10)
1 Japan 3657
2 India 509
3 China 495
5 Taiwan 376
8 Korea 106
15 Malaysia 47
17 Thailand 36
19 Hong Kong 33
23 Singapore 29
*Source: http://www.iso27001certificates.com
Some of the ISMS Certified Organizations in Malaysia
AEON Credit Services
AmBank
CyberSecurity Malaysia
E-Cop Surveillance
Extol MSC
HeiTech Padu
HP
Jabatan Pendaftaran Negara
Kompakar
KWSP
Malaysia Airports Technologies
KWSP
MEPS
Panasonic
Prudential Services Asia
Sime Darby
Telekom Malaysia*Source: http://www.iso27001certificates.com
Critical agencies to get ISMS Certification
2010 Information Security BreachesSurvey results
0
10
20
30
40
50
60
70
Virus
infection /
malicious
software
Significant
attempt to
break in
network
Unauthorized
penetration
into network
Suffered
denial of
service attack
2008
2009
*commissioned by Infosecurity Europe and written by PricewaterhouseCoopers LLP
Top 5 MalwareTaterf, Frethog, Renos, Rimecud,
Conficker (aka Downad)
Malware infection rates by country/region in 2Q10
Where we are now
Emerging ICT Security Threat
Not surprisingly, social networking represents one of
the fastest emerging new areas of risk.
Loss/leaking of
information
Statement to
damage
company
reputation
Downloading of
pirated material
with legal
implications
Identity theft
that
compromises
company’s
network and
information
* Source: PwC “2011 Global State of Information Security Survey®”
Emerging ICT Security Trend
One of the leading priorities for many companies is
mitigating the consequences of a breach—through better
incident response.
nearly 6 out of every 10 (58%) respondents who
report their organization has a contingency plan in place
for security incidents is a healthy number.
HOWEVER
63% of them said the plan they have doesn’t
work or ineffective.
* Source: PwC “2011 Global State of Information Security Survey®”
Your business is primarily still about your key People…
Some of our Renowned Speakers
Ian Charters, BCIGurpreet Singh
BSI India
Dr Goh Moh HengBCMI
Dr Edward ChanMalaysia Psychology Center
Koji Nakao, KDDI
Ong Ai Lin, PwC
Dr Edgar Frank, BCI
Professor Edward Humphreys
En. Abdullah AhmadHeiTech Padu
And many others esteemed speakers
Fantastic line-ups for you!
Lucky Draws
Complimentary
BCI Affiliate
Membership
worth RM500
Certificate of
Attendance
(upon completion
of 2 days session)
Exhibition
booth
The best preparation for tomorrow is doing your best
today.
Thank you
