29
How LA Investment Advisors Use Vulnerability Testing to Protect Their Assets Courtesy of FPA Technology Services, Inc. http:// www.TechGuideforLAInvestmentAdvisors.com

How LA Investment Advisors Use Vulnerability Testing to Protect Their Assets (SlideShare)

Embed Size (px)

Citation preview

Page 1: How LA Investment Advisors Use Vulnerability Testing to Protect Their Assets (SlideShare)

How LA Investment Advisors

Use Vulnerability Testing

to Protect Their Assets

Courtesy of FPA Technology Services, Inc.

http://www.TechGuideforLAInvestmentAdvisors.com

Page 2: How LA Investment Advisors Use Vulnerability Testing to Protect Their Assets (SlideShare)

Sponsored by

http://www.TechGuideforLAInvestmentAdvisors.com

Craig PollackFounder & CEO

A “belt and suspenders”

approach with more layers

of defense are needed:

Page 3: How LA Investment Advisors Use Vulnerability Testing to Protect Their Assets (SlideShare)

Sponsored by

http://www.TechGuideforLAInvestmentAdvisors.com

Craig PollackFounder & CEO

web security solutions,

intrusion prevention services,

anti-spam, and more

Page 4: How LA Investment Advisors Use Vulnerability Testing to Protect Their Assets (SlideShare)

Sponsored by

http://www.TechGuideforLAInvestmentAdvisors.com

Craig PollackFounder & CEO

Vulnerability testing,

also known as vulnerability

analysis or assessment,

is a procedure

Page 5: How LA Investment Advisors Use Vulnerability Testing to Protect Their Assets (SlideShare)

Sponsored by

http://www.TechGuideforLAInvestmentAdvisors.com

Craig PollackFounder & CEO

that identifies and categorizes

the externally facing security

flaws in a company’s

IT infrastructure

Page 6: How LA Investment Advisors Use Vulnerability Testing to Protect Their Assets (SlideShare)

Sponsored by

http://www.TechGuideforLAInvestmentAdvisors.com

Craig PollackFounder & CEO

Defining and Classifying

Infrastructure Resources

Page 7: How LA Investment Advisors Use Vulnerability Testing to Protect Their Assets (SlideShare)

Sponsored by

http://www.TechGuideforLAInvestmentAdvisors.com

Craig PollackFounder & CEO

Cataloguing resources

that are used to deliver

online services and contain

confidential firm data

Page 8: How LA Investment Advisors Use Vulnerability Testing to Protect Their Assets (SlideShare)

Sponsored by

http://www.TechGuideforLAInvestmentAdvisors.com

Craig PollackFounder & CEO

makes it easier to pinpoint

the source of a DOS (Denial of

Service) attack, hack attempt,

or malware opportunity

Page 9: How LA Investment Advisors Use Vulnerability Testing to Protect Their Assets (SlideShare)

Sponsored by

http://www.TechGuideforLAInvestmentAdvisors.com

Craig PollackFounder & CEO

Assigning Relative Levels of

Importance to Every Resource

Page 10: How LA Investment Advisors Use Vulnerability Testing to Protect Their Assets (SlideShare)

Sponsored by

http://www.TechGuideforLAInvestmentAdvisors.com

Craig PollackFounder & CEO

In the case of a multi-target

attack, web servers would

take priority over smartphones

Page 11: How LA Investment Advisors Use Vulnerability Testing to Protect Their Assets (SlideShare)

Sponsored by

http://www.TechGuideforLAInvestmentAdvisors.com

Craig PollackFounder & CEO

Identifying Potential Threats

Page 12: How LA Investment Advisors Use Vulnerability Testing to Protect Their Assets (SlideShare)

Sponsored by

http://www.TechGuideforLAInvestmentAdvisors.com

Craig PollackFounder & CEO

Internet security experts

or specially designed software

packages intentionally probe

a system or network to locate

weaknesses

Page 13: How LA Investment Advisors Use Vulnerability Testing to Protect Their Assets (SlideShare)

Sponsored by

http://www.TechGuideforLAInvestmentAdvisors.com

Craig PollackFounder & CEO

Putting Together a Plan to Deal

with More Serious Problems First

Page 14: How LA Investment Advisors Use Vulnerability Testing to Protect Their Assets (SlideShare)

Sponsored by

http://www.TechGuideforLAInvestmentAdvisors.com

Craig PollackFounder & CEO

Senior managers need to:

Page 15: How LA Investment Advisors Use Vulnerability Testing to Protect Their Assets (SlideShare)

Sponsored by

http://www.TechGuideforLAInvestmentAdvisors.com

Craig PollackFounder & CEO

• Document the steps for

making major decisions,

such as quarantining any

areas of the network that

have been infiltrated

Page 16: How LA Investment Advisors Use Vulnerability Testing to Protect Their Assets (SlideShare)

Sponsored by

http://www.TechGuideforLAInvestmentAdvisors.com

Craig PollackFounder & CEO

• Identify the personnel

who are integral

to incident response

and business continuity

Page 17: How LA Investment Advisors Use Vulnerability Testing to Protect Their Assets (SlideShare)

Sponsored by

http://www.TechGuideforLAInvestmentAdvisors.com

Craig PollackFounder & CEO

• Ensure that response plans

are available to all

employees in the firm, and

that everyone knows what

they need to do in the event

of a security breach

Page 18: How LA Investment Advisors Use Vulnerability Testing to Protect Their Assets (SlideShare)

Sponsored by

http://www.TechGuideforLAInvestmentAdvisors.com

Craig PollackFounder & CEO

Defining and Implementing

Ways to Minimize Attack

Consequences

Page 19: How LA Investment Advisors Use Vulnerability Testing to Protect Their Assets (SlideShare)

Sponsored by

http://www.TechGuideforLAInvestmentAdvisors.com

Craig PollackFounder & CEO

The following steps are also

recommended to ensure

data integrity:

Page 20: How LA Investment Advisors Use Vulnerability Testing to Protect Their Assets (SlideShare)

Sponsored by

http://www.TechGuideforLAInvestmentAdvisors.com

Craig PollackFounder & CEO

• Encrypt all sensitive data

so it becomes harder for

attackers to steal

Page 21: How LA Investment Advisors Use Vulnerability Testing to Protect Their Assets (SlideShare)

Sponsored by

http://www.TechGuideforLAInvestmentAdvisors.com

Craig PollackFounder & CEO

• Provide employees with

access only to the files and

applications they need

to do their jobs

Page 22: How LA Investment Advisors Use Vulnerability Testing to Protect Their Assets (SlideShare)

Sponsored by

http://www.TechGuideforLAInvestmentAdvisors.com

Craig PollackFounder & CEO

• Implement a two-factor

authentication process:

do not rely on passwords

alone

Page 23: How LA Investment Advisors Use Vulnerability Testing to Protect Their Assets (SlideShare)

Sponsored by

http://www.TechGuideforLAInvestmentAdvisors.com

Craig PollackFounder & CEO

Bottom Line

Page 24: How LA Investment Advisors Use Vulnerability Testing to Protect Their Assets (SlideShare)

Sponsored by

http://www.TechGuideforLAInvestmentAdvisors.com

Craig PollackFounder & CEO

There are many ways to

address your new found

vulnerabilities

Page 25: How LA Investment Advisors Use Vulnerability Testing to Protect Their Assets (SlideShare)

Sponsored by

http://www.TechGuideforLAInvestmentAdvisors.com

Craig PollackFounder & CEO

- between business continuity

software packages and

security assessment and

remediation services

Page 26: How LA Investment Advisors Use Vulnerability Testing to Protect Their Assets (SlideShare)

Sponsored by

http://www.TechGuideforLAInvestmentAdvisors.com

Craig PollackFounder & CEO

Has your investment firm

used vulnerability testing

on its network and systems?

Page 27: How LA Investment Advisors Use Vulnerability Testing to Protect Their Assets (SlideShare)

Sponsored by

http://www.TechGuideforLAInvestmentAdvisors.com

Craig PollackFounder & CEO

And does it do it on a recurring

basis?

Page 28: How LA Investment Advisors Use Vulnerability Testing to Protect Their Assets (SlideShare)

Sponsored by

http://www.TechGuideforLAInvestmentAdvisors.com

Craig PollackFounder & CEO

Let us know your thoughts

in the Comments box below

Page 29: How LA Investment Advisors Use Vulnerability Testing to Protect Their Assets (SlideShare)

Copyright © FPA Technology Services, Inc.

Learn How to Protect Your Firm’s Technology

With the Right IT Service Provider

Download Your Free Guide

Investing in High Net Worth Clients:

The LA Investment Advisor’s Guide to Using

Technology to Manage and Grow Your Firm

Now at http://www.TechGuideforLAInvestmentAdvisors.com