Siemens Ki Dunya - Siemens Pakistan

Corporate Information Technology
Corporate Information Technology
Drills Path to Secure Siemens
Spreading Information Security
Awareness
The most valuable assets of any
organization are its
people, information,
operations and systems.
Companies face threats
to these assets everyday
in the form of computer
viruses, network attacks,
fraud, industrial espionage,
and even natural
disasters. Protecting the safety,
confidentiality, integrity and availability
of these assets is essential to maintaining
profitability, compliance, public
image and a competitive edge.
The increasing digitization of everyday
life and stronger measures for protecting
sensitive corporate data has
generated an enormous demand for
Information Security solutions and
services. “The market for security
technologies overall has grown. Use of
new material and security mechanisms,
as well as development of
innovative application
scenarios for modern
high-security technologies,
must guarantee
improved protection,” says
Ulrich Hamann, CEO of
Bundesdruckerei GmbH, in
assessing Information Security growth.
Demand for adequate protection of the
IT Infrastructure has increased tremendously
at Siemens Pakistan. This is a
result, in part, of Corporate Information
Technology’s continuous awareness of
40 Siemens Ki Dunya | August 2009
the risks of unwanted intrusions, data
manipulation and
distribution of malicious
software. The implementation
and compliance
of Information
Security rules will be
successful when all
persons are acquainted with the
required measures. Hence, developing a
Security Awareness Program has been
constructive in effectively implementing
the measures needed to keep your data
safe and secure. Information Security
Awareness provides the greatest return
on investment and has had the greatest
positive impact on Siemens.
Be Aware, Be Secure
The motto of our campaign is “Be
Aware, Be Secure.” The aim is to raise
employees’ awareness
and change their habits.
After all, how effective
can measures such as
building security,
encryption programs and
firewalls be, if employees
are not conscious of
Information Security in all that they do.
Information Security is considered to be
of supreme importance.
To ensure the highest level of data
security, as well as seamless operations
at Siemens, Corporate Information
Technology is effectively educating the
users to equip them with the required
Information Security knowledge in order
to make Information Security successful
throughout the company.
Information Security Awareness
program leverages a vast store of
content and training delivery methods
to provide users with an unparalleled
security awareness program. The
program comprises of the following
components:
Training Material
� Instructor led Information Security
Awareness training sessions.
� Information Security Forum –
Interactive, self-paced, web-based
training.
� Customized awareness collateral
including posters, flyers, brochures,
etc.
� Information Security Videos.
� Information Security Manual/ Guide
lines.
Training Sessions
There is no better method of security
awareness knowledge transfer than an
Instructor-led Information Security
Awareness Session. With attention
grabbing topics such as phishing scams,
email security, Corporate Information
Technology ensures that
our instructors have the
best content and course
to present.
Couple this with videos of
real-world threats and
vulnerabilities; Information
Security training
sessions are able to provide users with
vital information about concrete
remediation steps.
Information Security Forum
Corporate Information Technology is
developing a proprietary
web-based
learning portal for
users that prefer a
Web-based Training
for Information
Security Awareness. The content of the
forum will be customized to show
Information Security issues. This method
of delivery would leverage significant
cost savings, and allow users to train at
their own convenience.
Information Security Website
Corporate Information Technology
maintains a comprehensive webpage on
Information Security. The content of the
website comprises of the following:
� Policies and Guidelines to protect
you from internal and external
threats
� IS Training material such as selftraining
programs
� Checklists to ensure that you are
following the program correctly
� Videos of real-world threats
� Presentations
� Handouts/ Flyers, and
� Latest News
In future, we will be developing an
online Information Security incident
reporting portal, which will also be
available on the website.
Your Local IS Rules
The protection of sensitive information
is important and all employees are
required to give it due importance. By
protecting yourself and the systems
entrusted to you,
you are protecting your co-workers,
Siemens network and data and,
ultimately,
the customers who are depending on
you. With the
increasing volume
and complexity of
cyber security
threats, we must be
aware of how to
protect ourselves and the information in
our care. There might be several
situations in which we put our knowledge
at risk. It is essential to be aware of
these risks and to avoid them as far as
possible.
Dangerous Situation
One of the fastest ways to compromise
a system is to simply
walk up to an
unattended
workstation and
access the system.
E-mail access,
confidential records and personal files
can be easily compromised. Users
should remain cautious and must lock
their workstations or shut down
completely to avoid misuse of their
systems.
Email Caution
E-mail messaging is a wonderful tool
but it can be used in a number of ways.
Phishing, for example, is a fraudulent
attempt made through E-mail, to steal
your personal information. Employees
must ignore such emails – otherwise
they will lose vital information stored on
their hard disks. Employees using Corina
Remote Access Solution, or whose PCs
are not linked to the Corporate Intranet
have to take added precaution.
Computer viruses – What can you
do?
Your system can be exposed to spyware,
viruses or a Trojan
horse sometimes
just by clicking on a
link and visiting a
malicious site. Our
department works
to ensure that
Siemens’ virus
protection programs are up-to-date.
Every two to three days the entire
intranet automatically updates itself
with virus protection applications. In
case of concern about such a threat,
contact Corporate Information Technology
immediately on Ext: 2073.
Making your contribution to
Information Security
Awareness is crucial to avoid risks. Just
by being aware of
security issues at
your workplace
you can make an
immense contribution
towards
Information Security.
By
Natasha Beg
CIT
Siemens Ki Dunya | August 2009
41