Js Investments Limited · PSX:JSIL
Js Investments — Investor Presentation (July 2019)
15 slides from Js Investments's investor presentation, July 2019
Slide 1: JSIL Management Presentation: IT & IS Policy Overview
www.pwc.com/pk JSIL Management Presentation IT & IS Policy Overview July 4
Slide 2: Today's Agenda
Today’s Agenda • Information Security vs IT Operations • Setting the Scene • Information Security and Information Technology Policies Areas • Layout of Deliverables 2
Slide 3: Technology Consulting – Service Proposition
Technology Consulting – Service Proposition Relevant Service Offerings 1 1. IT Governance Design & Implementation Confidence to take risks 2. IT Risk Assessment / Diagnostic Confidence that technology risks 3. IT Risk Management Design & Implementation are understood and well 4. IT Due Diligence IT
Slide 4: Information Security vs IT Operations
Information Security vs IT Operations Information Security IT Operations Information Security is the set of Information Technology business processes that ensures Operations relate to how that within the enterprise, technology is used and information is protected managed so that it supports against
Slide 5: Setting the Scene – ISO 20000 and ITIL
Setting the Scene – ISO 20000 and ITIL In order to support JSIL main business functions, AFF will assist JSIL to help and realize the below project objectives and excellence dimensions. Excellence Dimensions Success criteria Customer Excellence Increased customer satisfaction Operational Excellence
Slide 6: Setting the Scene – ISO 27001
Setting the Scene – ISO 27001 There are number of challenges in managing information security and the ISO 27001 Information Security Management System (ISMS) is one way to holistically address all these issues. Effectively protecting Responding to security sensitive data events Protecting business M
Slide 7: Key findings from The Global State of Information Security Survey 2018
Key findings from The Global State of Information Security® Survey 2018 By industry, many information security budgets have stayed stable while others have dropped significantly Respondents in the Entertainment & Media industry saw information security budgets drop an average of 31%, while those in
Slide 8: Why IT & IS Security Policies are so important!
Why IT & IS Security Policies are so important! To Ensure: Your business to operate efficiently. Establish baseline stance on security to minimize risk for the organization. Protects organization through proactive policy stance. Establishes the rules for user behavior and any other IT person
Slide 9: Why Security Policies fail!
Why Security Policies fail! Unfortunately • Policies are often among the most overlooked elements many security • Often organized as a poorly maintained collection of documents policies fail to protect because • The majority of policies exist chiefly to satisfy an external stakeholder • Not Addressi
Slide 10: Information Security Management from the ISO/IEC 27001 perspective
Information Security Management from the ISO/IEC 27001 perspective Information is an asset that, like other important business assets, is essential to an organization’s business and consequently needs to be suitably protected. ISO 27001 aims to protect: Information Assets Technology Physical Assets
Slide 11: Areas Based on ISO 27001 for IS Policies and Procedures
Areas Based on ISO 27001 for IS Policies and Procedures After the detailed evaluation we will then be develop policies and procedures for relevant areas: I. Organization of Information Security II. Asset Management and Information classification III. Personnel Security IV. Access & Role Management V
Slide 12: Areas Based on ISO 20000 & ITIL for IT Policies and Procedures
Areas Based on ISO 20000 & ITIL for IT Policies and Procedures Areas Description I. Planning the IT • IT Management Structure Environment • Roles and Responsibilities • IT Strategic Plan Development and Review Process • IT Budget Policy and Development Process • Personnel Capacity Building, Training
Slide 13: Areas Based on ISO 20000 & ITIL for IT Policies and Procedures (Cont.)
Areas Based on ISO 20000 & ITIL for IT Policies and Procedures Areas Description (Cont.) • Installation of Licensed Software • Security Patch Management • Password Storage & Management • Incident Management • Helpdesk / IT Support • Network Management • Remote Access • Server Virtualization • Capaci
Slide 14: Layout of Deliverables
Layout of Deliverables : Introduction Document Owner and Maintenance Approval Matrix Objectives and Limitation of Policy Layout of Policy Document Information Technology/ Security Charter Policy Statements / Section Section Description Purpose This section will state the purpose of policy in relatio
Slide 15: End of Presentation
End of Presentation Questions & Answers All information presented in this presentation is the intellectual property of A.F. Ferguson & Co. (AFFCO) and should be considered strictly confidential. As such, this presentation should not be disclosed, in whole or in part, to any third party without prior