Cybersecurity and the Handling of Cyber Incidents

2019 ◽  
Vol 10 (2) ◽  
pp. 107-128
Author(s):  
Jerzy Kosiński ◽  
Tomasz Gontarz ◽  
Robert Kośla

The article presents interpretations of the concepts of cybersecurity and cybercrime as well as the abuse of the term cybernetic. The author refers to information as a new “centre of gravity” of the nation’s power and special attention is paid to activities aimed at ensuring a high level of information security in Poland. The assumptions of the draft Act on the national cybersecurity system are described and particular emphasis is placed on the issues of technical and organisational reporting and the handling of ICT security incidents. The author points out that handling incidents violating cyber security at a strategic level for a country ought to be considered as an intentional action of a definite and repeatable character. Here the reference to the ISO/IEC standards and recommendations can be found. Moreover, behaviours related to securing digital evidence after an incident, including the so-called good practice in relation to the reaction in the event of an incident, are presented. A simplified procedure for securing computer hardware, as a recommended method of action in case of the triage and live data forensics, are suggested in the article. The recommendations of the FORZA methodology and frameworks are also discussed. When summarising, the author underlines that it is essential to prepare appropriate procedures and personnel for the broadly understood handling of incidents violating cybersecurity. This includes protection of digital evidence according to the procedures, good practice and suggestions contained in normative documents, as well as implementing cybersecurity policy, bringing legislation into line with international standards and educating users and the judiciary.

Author(s):  
Tony Bonser

This chapter includes a personal view of advance care planning (ACP) from Tony Bonser, whose son, Neil died aged 35 and who now works for the National Council for Palliative Care, with examples from others. It describes the importance and impact of ACP on people nearing the end of life and their families, and recommends that ACP should be mainstreamed across health and social care as part of good practice, and become part of the public debate through movements like Dying Matters. It affirms that ACP: enables a dialogue to be started; must be centred on patients and enable the implementation of patient wishes; will centre on giving advice rather than prescribing outcomes; has positive effects; needs high-level communication skills; helps restore control; and has societal implications.


2021 ◽  
Vol 2 (4) ◽  
pp. 146-152
Author(s):  
E. V. ANDRIANOVA ◽  
◽  
P. S. SHCHERBACHENKO ◽  

This article discusses and analyzes the most popular standards of non-financial reporting, which has a significant impact on the transformation of the business environment. Already, domestic and foreign companies with a high level of responsibility are beginning to publish non-financial statements in addition to financial statements, which is an additional tool for communication with stakeholders and a new source of information about their activities. To date, reports of this type are clearly unregulated, there are no verification standards, however, there is already a positive trend and the active introduction of non-financial indicators in the regular reporting of companies.


2019 ◽  
Vol 214 ◽  
pp. 07016 ◽  
Author(s):  
Tian Yan ◽  
Shan Zeng ◽  
Mengyao Qi ◽  
Qingbao Hu ◽  
Fazhi Qi

To improve hardware utilization and save manpower in system maintenance, most of the web services in IHEP have been migrated to a private cloud build upon OpenStack. However, cyber security attacks becomes a serious threats to the cloud progressively. Therefore, a cyber security detection and monitoring system is deployed for this cloud platform. This system collects various security related logs as data sources, and processes them in a framework composed of open source data store, analysis and visualization tools. With this system, security incidents and events can be handled in time and rapid response can be taken to protect cloud platform against cyber security threats.


2021 ◽  
Vol 6 (1) ◽  
pp. 72-82
Author(s):  
Faiz Iman Djufri ◽  
Charles Lim

Cyber Security is an interchange between attackers and defenders, a non-static balancing force. The increasing trend of novel security threats and security incidents, which does not seem to be stopping, prompts the need to add another line of security defences. This is because the risk management and risk detection has become virtually impossible due to the limited access towards user data and the variations of modern threat taxonomies. The traditional strategy of self-discovery and signature detection which has a static nature is now obsolete in facing threats of the new generation with a dynamic nature; threats which are resilient, complex, and evasive. Therefore, this thesis discusses the use of MISP and The Triad Investigation approach to share the Indicator of Compromise on Cyber Intelligence Sharing Platform to be able to address the newt threats.


2014 ◽  
Vol 11 (2) ◽  
pp. 591-601 ◽  
Author(s):  
Nermeen F. Shehata ◽  
Khaled M. Dahawy

This report is a case study of corporate governance disclosure in Egypt. The study employs the benchmark of good practices in corporate governance disclosure developed by the Intergovernmental Working Group of Experts on International Standards of Accounting and Reporting (ISAR). This benchmark consists of fifty two disclosure items covering five subject areas and is based on a sample of the top 29 listed companies in Egypt. This study is complimentary to an earlier study conducted in 2007: 2007 Review of the implementation status of corporate governance disclosures: case study Egypt. This report compares the results of the current study to the 2007 study. This study finds the average disclosure level is less than half of the items in the ISAR benchmark. While nine items in the ISAR benchmark were disclosed by more than two-thirds of the companies in the study, forty items were disclosed by less than half. The absolute number of disclosure items found for each company ranged from 5 to 43, indicating a high level of variability between ‘best practice’ companies and companies with minimal disclosure practices. The study concludes that while the sample has relatively high rates of disclosure for few items, and the average disclosures in 2010 almost doubled the 2005 average disclosures in Egypt for several categories, they are still low levels compared to the average emerging markets levels. Policy options discussed include penalizing companies for undisclosed items, and providing education and training for executives and directors to enhance the awareness of the rapidly evolving regulatory environment, as well as the underlying importance of corporate governance disclosure


2020 ◽  
Vol 63 (12) ◽  
pp. 776-781
Author(s):  
Sang Hyun Kim ◽  
Jung Yul Park

The purpose of this study is to identify the historical background and status of continuing medical education (CME) in Korea, and to establish a method for improving CME in the future. Currently, the CME in Korea presents several problems that need to be addressed, such as the appropriateness of the annual required credits, maintenance of simple refresher training, insufficient online education, and evaluation and accreditation of educational institutions. Solutions are offered in the form of increased time for the required credits, introduction of social competency topics and education methods, improvement of online education, evaluation to improve the quality of CME, and introduction of a systematic and appropriate evaluation and accreditation system. CME and continuing professional development (CPD) are not only obligations stipulated in the medical law, but also professional requisites in terms of securing autonomy through self-development and self-regulation. It aims to enlighten the high level of professionalism required by the international community. It is an essential requirement and ultimately promotes and protects the physical, mental, and social health of people worldwide. In order to cope with the international standards of CME/CPD that ensure high quality treatment and patient safety, it is crucial to reform the continuing medical education system by securing the physicians’ professionalism. To this end, authors propose the improvement and implementation of CME system in Korea based on internal review and benchmarks of the internationally recognized CME/CPD systems that meet global standards.


2011 ◽  
Vol 2011 ◽  
pp. 1-8 ◽  
Author(s):  
Swapna Iyer

The invention of “smart grid” promises to improve the efficiency and reliability of the power system. As smart grid is turning out to be one of the most promising technologies, its security concerns are becoming more crucial. The grid is susceptible to different types of attacks. This paper will focus on these threats and risks especially relating to cyber security. Cyber security is a vital topic, since the smart grid uses high level of computation like the IT. We will also see cryptography and key management techniques that are required to overcome these attacks. Privacy of consumers is another important security concern that this paper will deal with.


Nafta-Gaz ◽  
2021 ◽  
Vol 77 (8) ◽  
pp. 553-560
Author(s):  
Anna Huszał ◽  

Due to rapid advancement in technology, the odorization process in Poland seems to be increasingly stabilized in practice and conducted at a sufficiently high level. International standards are adopted in this regard. One of the most important requirements for the natural gases quality delivered to customers from a distribution network, guaranteeing their safe use is ensuring an appropriate odorization level, allowing to detect the uncontrolled gas leakages from the distribution network, installation and gas appliances. The odorant concentration in its dosing point should ensure the intensity of the gas odor at the “clearly perceptible” level at the network end point. The odorant concentration variability in the gas network is a dynamic value, constantly accompanying the odorizing process. In consequence constant metrological supervision over the process is needed (what might be done by measuring the odorant concentration and gas odor intensity). Also, verification of undergoing periodic changes in the value of the minimum concentration of odorant in the gas for the respective groups of natural gases and various gas pipelines based on operational experience and field measurements is required. Such verification allows to determine the optimal concentration of odorant for each group of natural gases and furthermore allows to optimize the cost of gas odorization process while ensuring its legally required quality described as odor intensity. This article presents the problem of the dependence of the network gas odorization effectiveness on various factors, especially network parameters or even the gas composition itself. Their identification allows to better plan the process and ensure its effective implementation, which ultimately ensures safety for gas users.


Author(s):  
Greg W. Gmurczyk ◽  
Ashwani K. Gupta

Abstract Constant and significant progress in both computer hardware and numerical algorithms, in recent years, have made it possible to investigate complex phenomena in engineering systems using computer modeling and simulations. Advanced numerical simulations can be treated as an extension of traditional analytical-theoretical analyses. In such cases, some of the simplifying assumptions can usually be dropped and the nonlinear interactions between various processes can be captured. One of the most complex engineering processes encountered in industry is a combustion process utilized either for power/thrust generation or incineration. However, even nowadays, because of the high level of complexity of the general problem of a combustion process in practical systems, it is not currently possible to simulate directly all the length and time scales of interest. Simplifying assumptions still need to be made, but they can be less drastic than in analytical approaches. Therefore, another view of numerical simulations is as a tool to simulate idealized systems and conduct numerical experiments. Such numerical experiments can be complementary to laboratory experiments and can also provide more detailed, nonintrusive diagnostics. Therefore, simulations, along with theory and laboratory experiments, can provide a more complete picture and better understanding of a combustion process. As an example of computer modeling of industrial combustion systems, an enclosed spray flame was considered. Such a flame can frequently be encountered in power generation units, turbine engines, and incinerators. Both the physical and mathematical models were formulated based on data from earlier laboratory studies and results obtained for open air spray flames. The purpose of this study was to use those data as model input to predict the characteristics of a confined flame and provide a means of optimizing the system design with a PC computer.


2021 ◽  
Vol 16 (1(21)) ◽  
pp. 22-31
Author(s):  
David Bidzinashvili

The new Corona-virus and the contagious disease which it causes, the so called COVID 19, put forward the serious challenges for many countries all over the world and for Georgia among them. Almost the whole world is facing very serious obstacles on the international and national levels. Too many problems emerged in the world countries. To resist against the new disease has become the main priority for each country. The global processes caused by the pandemics have influenced the audit service as well. The uncertainty and unpredictability caused the new risks of deficiencies and activated already existed ones in the new environment. The situation became more complicated due to the fact that it can happen that the auditors do not consider the mentioned risks in the process of planning for audits or the risks may be considered mistakenly. The firms and other economical institutions in which the audit is carried out are obliged to adopt the new rules and changing environments in which their businesses function; they should change the rules of fulfilling the operation, preparing the financial accounts, the processes of their representing the information processes, safety of information shown in the financial accounts, the rules of their preparing; they also evaluate the possibilities of keeping on their activities in the nearest future. The qualified performing of the audit implies the basical elemenst which helps to create such environment where the possibility of the high level audit will be at the maximum. Implementing the quality control implies that such system will include two stages; each of them is directed towards providing the audit processes according the international standards There are several types of the quality improvement system. In all of them the main variable value represents the amount of costs for the proper system. All countries choose the system which provides benefits taking the costs into consideration. There are four main stages in the process of implementation the system which will ensure the high quality audit. Here are four main stages shown in the process of implementation:  The first stage: to carry out diagnostic observation;  The second stage: stating the view;  The third sage: working out the system;  The fourth stage: implementation of the system. The firms and other economical institutions where the audit is carried out are obliged to be reliable with their activities in the changing situation in which their businesses function. The subjects change the rules of carrying out the usual operations, change the open information given in the financial accounts, and estimate the possibilities of maintaining the existing possibilities for the nearest future. It is important to revise some standards out of Audit International Standards and to make them fit for revealing and assessing the risks of essential mistakes and discrepencies. The controlled variation of the standard regulates such issues as the newly corrected risks caused by influences of COVID-19 pandemic on the planned approaches to the audit and also, evaluation of the risks already defined and making changes in them taking into consideration the influence of the errors in the risk evaluations and influence made upon the planned evaluations and audits the changes of which will influence the evaluations of the risks in the inner control of the subject on the previously made imagination of the control environment, in order to define the measures to be taken in order to change the reactions to the mistakes using different measures in order to reach the trustful mechanisms to rely on. International standards of audit– answering to the assessed risks, the checked variation of the standard implies that it maybecome necessary to change the measures of reaction to the changes in the circumstances in order to obtain enough reliable measures and activities to control the situation by means of enough auditory evidences. The auditor has responsibilities to take into consideration that largening the deadlines will cause growth of the period and the risks of the dates of events which will happen in the time interval between accountability date and the date of the conclusion made by audit, the audit is also responsible for any event taking place later in relation to the Covid-19 situation. He is responsible also for evaluation of the fact about financial information. The enterprise functioning within nowadays complex environment taking into consideration the situation of COVID 19, should consider such priority issues as the uncertainty accompanying the Covid situation, related covenants, and others which accompany the pandemic period, among them the region, the financial state of customers and dealers, liquidating and paying capacity. During the process of the risk assessments it should considered that Covid 19 pandemic greatly influenced the global economics and the separate branches such as hotels business, retail sail, tourism and others. As a result of pandemic, it is possible that the number of audit considerations and thee circumstances can modify them which can be conditioned by different circumstances and the audit will state if there are incorrectable improper conditioned due to the circumstances. The audit will make it certain there are unimprovable mistakes which apart and together are essential for the financial accountability and the auditor will conclude that they cannot acquire the proper conditioned which apart or together could be essential financial accounts or the audit will conclude that they are not able to the essential accountability. Important researches were led to assess the appeared situation and it was concluded that the COVID 19 pandemic had influenced the financial situation which showed that the specific actions and procedures became complicated.


Sign in / Sign up

Export Citation Format

Share Document