DoIT Annual Report 2017 - 2018

24 / 54

Security Awareness
Information security is securing information from unauthorized access, use, disclosure, disruption, modification or destruction.
“Security in responsibility of everyone” is a widely use phrase in Information Technology these days, and it is rightly because Information Security is evolving on the same pace as of
Information Technology itself, the importance of Confidentiality, Integrity and Authenticity (CIA) of information is now emphasized by both the public and private sectors.
European Network and Information Security Agency, ‘Awareness of the risks and available safeguards is the first line of defense for the security of information systems and networks.’
User is one of the key elements of Information Technology and security awareness sessions make and direct their attitude and knowledge towards security of an information assets
belongs to them and their organizations, At UAEU we are certified with an ISO 27001 (ISMS) and security awareness is an integral part of ISO 27001, we are conducting security
awareness sessions on regular basis through available methods like email, posters and training sessions. Which leads towards betterment of IT infrastructure and user satisfaction,
major topics covered in normal security awareness sessions are Password Protection, No Tailgating, Secure Use of Internet, Secure Use of Email, Read understand and adhere with
UAEU InfoSec Policies.
DoIT also make sure the online availability of major policies and procedures of Information technology at , here we have a few examples
of security awareness contents which we normally communicate to users:
22