Security program risk management in a tapless workflow. The security challenges of File-Based environments.

1. Multimedia Content Security in File-Based Environments Sami Guirguis Multimedia Content Technologist – TFO Sami.kamel@gmail.com 1

3. Security program and Risk management.

4. Approaching security in file based environment.

6. Assets locations 4

7. Multimedia File lifecycle 5 Are all the versions of the file deleted ? Can any of the file versions be recovered? Do all the subjects who access the file have the proper permissions? Was a backup copy created automatically for redundancy? Is the communication path secure? Is the file integrity guaranteed through this process?

9. Can a monetary value be assigned per asset?

10. Who can access each asset group?

11. What access controls are currently in place ?

12. Is there a trace/ logs ?

14. A comprehensive list of all possible threats.

15. The probability of the occurrence of each threat.

16. Loss potential per threat in a 12 month span.

17. Recommended safeguards and measures.

18. Compliance with federal privacy laws.CISSP ALL-IN-ONE by Shon Harris

19. Information Security – Core Principles 8 Confidentiality

21. Assigning a value to the asset.

22. Determining if the countermeasures are worth the financial and operational price.

25. Identify vulnerabilities and threats.

26. Quantify the probability and impact of the threats.

27. Provide an economic balance between the impact of these threats and the cost of the countermeasures.CISSP ALL-IN-ONE by Shon Harris

28. Risk analysis outcome 12 Low Impact High Probability High Impact High Probability High Impact Low probability Low Impact Low Probability

29. Identifying access 13

30. Risk Identification 14

31. How to assess the probability ? 15 Information Security and Risk Management By Ann-Marie Westgate

32. After Identifying the Risks ? 16 Avoiding the RiskFor example closing all access between the broadcast network and the Internet. Transferring the RiskOutsourcing security solutions, monitoring, audits, insurance. Mitigating the RiskApplying security controls. Accepting the Riskif it is more cost effective choice.

34. Administrative Controls(Policies, Procedures, Guidelines ….)

36. 19 Thank You Questions ?

37. 20 Links Media Fingerprinting - Sara Kudrle Office of the Privacy Commissioner of Canada Secure Scalable Multimedia Streaming Internet Streaming Media Alliance Digital Watermarking Alliance Risk Assessment Worksheet and Management Plan