pilar PILAR quick tour infopilartools com version 7
- Slides: 20
pilar µPILAR quick tour <info@pilar-tools. com> version 7. 4
µPILAR tour - v 7. 4 2
assets essential assets • determine system security requirements tour - v 7. 4 3
assets: valuation is the assignment of security levels or requirements: what the business requires tour - v 7. 4 4
assets: valuation security dimensions A availability I integrity C confidentiality Auth authenticity Acc accountability PD personal data tour - v 7. 4 security levels 7 high 4 medium 1 low non-valuated are negligible 5
valuation criteria there is a reason for the required security level tour - v 7. 4 6
support assets are the attack surface of the system; incidents occur in them tour - v 7. 4 7
threat context tour - v 7. 4 8
security profile for each phase • current, target • PILAR is a recommendation tour - v 7. 4 9
security profile protection maturity L 0 – not implemented L 1 – initial L 2 – informal – based on good will L 3 – security procedures L 4 – supervised L 5 – continuous improvement tour - v 7. 4 10
security profile tour - v 7. 4 11
legal measures tour - v 7. 4 12
risk position prediction of security incidents • impact - what could happen • risk - what will probably happen tour - v 7. 4 13
potential risk for each project phase • potential – no protection • current, target tour - v 7. 4 14
residual risk for each project phase • potential – no protection • current, target tour - v 7. 4 15
risk evolution for each project phase • potential – no protection • current, target tour - v 7. 4 16
risk map tour - v 7. 4 17
template-based reports tour - v 7. 4 18
improvement suggestions PILAR suggests to improve some measures w. r. t. the red marked phase tour - v 7. 4 19
questions? support@pilar-tools. com tour - v 7. 4 20
