Sign Iowa Terms of Use Agreement Secure

Document type sign terms of use agreement iowa secure

what's information assurance what's information security what's cyber security these are three terms that we hear a lot about and see in job postings but what's really the difference in this video we're going to break down the differences between the three terms as well as take a look at some jobs with different titles give you a comparison but first this is the first time that we're meeting welcome to my channel my name is john good and here i get to spread my passion for cyber security training tips and tricks and career advice to help you go further remember to smash the thumbs up to like this video hit the subscribe button and the bell icon so you don't miss future content and make sure to leave a comment for the youtube algorithm if you like my training and you want more check out my website at johngood.com to get access to training courses without distracting interruptions or advertisements make sure that you sign up for my newsletter using the link in the description to get a free copy of my ebook on cyber security careers you can also join me on the discord server the link is down in the description all right let's get into the video i remember back to when i was first getting into the field and terms like information assurance cyber security and information security were all foreign to me why do we see one term used over another what's the real difference first let's take a look at the definitions of each information assurance or ia is the practice of assuring information and managing risks related to the use processing storage and transmission of information or data in the systems and processes used for those purposes information security is the state of being protected against the unauthorized use of information especially electronic data or the measures taken to achieve this cyber security is the art of protecting networks devices and data from unauthorized access or criminal use and the practice of ensuring cia confidentiality integrity and availability of information now those are the three definitions that i took directly from the internet when i search for each of them when we first take a glance at the definitions we actually see that information assurance and information security are actually quite similar in that they deal with more of a holistic approach of securing data it's not just focused on the technical aspects specifically both ia and infosec spend some resources on protecting the physical elements of security unlike cyber security which is much more focused on the virtual world a good way to think about the different terms is to use a security framework like the nist special publication 800-53 controls if you aren't familiar with this document it contains every single kind of control that you can think of from physical access to policies to encryption implementations when we look at different controls under a cyber security lens we're going to be looking at specific technical controls such as firewall implementations information assurance or information security rules might be responsible for maintaining all these security controls or we might just be responsible for making sure that we're compliant to the controls typically the term information assurance is seen frequently in the public sector such as government agencies or in the military we might see similar uses of related terms in the private industry referred to under the information security umbrella and cyber security can be used in a bunch of different industries but which one is correct well they all are but it's more so how the different arenas have adopted the use of the terms unfortunately the terms do occasionally get misused but since you're watching this video you'll have a better idea when you hear the terms used let's go ahead and look at some jobs with all three terms so that you can look at the differences or even see if the terms are being misused based on the description given i've specifically only pulled up jobs with the terms information security information assurance or cyber security that are in the titles so that way we have an equal comparison all right let's take a look at the jobs that i pulled up all right so what i did was i went to indeed.com which is a common job searching website here in the united states and i search for jobs with the titles that include the three terms so information assurance information security and cyber security i have several different jobs that we're going to go through now now the first job is an information assurance engineer job so as we scroll down here i'm going to start looking at the different requirements here so as you can see here right off the bat you see the department of defense assessment and authorization and typically with information assurance jobs they are going to deal a lot with the nist standards for the risk management framework that's the nist special publication 800 series and specifically with this one because it's an information assurance role you do also see that they want some familiarity with disa stigs which are basically security controls and things that need to be in place in order to be compliant and typically with an information assurance role you are going to be dealing with somebody in the government either a government entity a government customer something of that nature so of course you see that listed in here as well and as we scroll down here we can take a little bit more look at the different requirements for this job so one thing specifically with information assurance roles is documentation is something that exists in everything so information assurance jobs and with the nis special publication 800 series the risk management framework there are certain requirements as far as getting your system authorized and approved for operation from different customers that is a big part of information assurance jobs and as we go down here and we start looking at more of the essential job functions you do start to see more of that information so for instance this job is going to deal with unclassified and classified environments within the dod and following industry best practices and then down here you see this authorization to operate so the ato and that is that approval for a specific system to operate so it's a lot of documentation and requirements that have to be in place for that system to be approved and we'll keep scrolling down here to see what else is listed here typically with jobs that are in information assurance and specifically this job because it's talking about classified environments we're going to need some kind of clearance so with this job specifically we can see that they want you to have a dod secret security clearance now in this kind of job you can definitely expect that you're going to get exposure to a lot of different things again information assurance deals a lot with the documentation and requirements that you need for a system to operate within the government or applying the nist standards typically for information assurance rules if it is just a straight information assurance role it is probably not going to be the most technical job it probably will have technical aspects to it such as checking configurations and things like that but it's probably not going to be that reverse engineer kind of deep technical position if we were comparing this to a private sector job this might be more of like a governance risk and compliance type job or something that doesn't necessarily have all the technical requirements of a security operations center type job all right now this is the second job that i found for information assurance and again we can see here that it talks about compliance with security requirements and regulatory requirements now with information assurance jobs they work very closely with their it counterparts because information assurance is actually a different part of the organization it is not your traditional i.t organization that has things like system administrators it's much more focused on the security aspect of things we can also see here that system security plans instructions guidance and sops or standard operating procedures you're going to have to maintain or develop them and as you can see in the rest of this description again this doesn't talk a lot about dealing with reverse engineering or some of those very deep technical aspects it is kind of a high level technical position that also deals with the business or their customers you can see here may represent the organization as a primary contact with internal representatives so just keep that in mind when you see the term information assurance that the jobs are not necessarily going to be the most technical jobs but you're probably going to get exposure to a lot of different stuff i hope you're enjoying the content in this video so far if you are make sure to hit the thumbs up to like this video and if you think of any questions let me know down in the comment section below also remember that this training and full courses can be found on my website at johngood.com without distracting interruptions or advertisements all right let's get back to the content all right this is the first information security job that i found and this is with tesla and you can see right off the bat here we have security monitoring detection and incident response now those are a little bit more technical aspects something that you didn't necessarily see in those information assurance job postings and of course that can be directly related to the actual company that you're in if things are much faster pace or they're much more focused on the technology and things like that you might have a little bit different aspects now if we scroll down here and take a look at the responsibilities here even these responsibilities that are listed are more technical than those previous positions that we were looking at because this wants you to look at the latest attacker techniques remediate malicious activity and use automation to improve identification and response time so just looking at those descriptions right there we can already see that things are more technical in this specific position than those previous two that we looked at now if we go down here to the requirements but we'll scroll down a little bit further so we can see in the requirements that for this position they want somebody with more technical knowledge such as intrusion detection incident response malware analysis so these are much more technical aspects you can also see that they're listing software engineering experience python ruby go c javascript and so on so you can already tell that this is probably going to be a much more technical job than those previous jobs so this is the next job that i found for information security and this actually has a compliance analyst aspect to the job so if we scroll down here and take a look at more of the responsibilities and requirements now without really having looked at this job posting i can almost guarantee that this is probably more similar to those information assurance roles than it was that previous job with tesla it's probably not quite as technical as the tesla job so if we start looking at some of these bullet points start talking about testing plans for high trust compliance publishing and maintaining public policy declarations security and awareness training it looks like and if we go ahead and keep scrolling down here we can look at the qualifications experience with multiple compliance frameworks excellent oral and written communication skills so in the jobs especially that are less technical based they are going to always want those good communication skills because you probably are going to deal with people from all over the business if you're in a very technical role there's a slight chance that you might not deal with other stakeholders but almost certainly in these less technical jobs you are absolutely going to deal with other people and as we can see compared to the tesla job i did not see any software languages listed in this job so either they just don't care or they're thinking that you can learn it on the fly they did have these bonus qualifications where they did list software engineering experience but based on what i've seen in this specific job posting i do not think this is going to be a super technical job i think this will be very similar to those information assurance jobs and quite different from that tesla job so this is the first cyber security job that i found typically with jobs that are listed as cyber security and their title tend to fall in the security operations centers and this one is no different if we look at some of these different descriptions of what the job is going to be deal with global sock team members monitoring and inspecting alerts with security operations jobs if you're not familiar with those security operations center is basically the monitoring center for the company so they review all the activity on the systems on the networks and things like that and typically they can get very very technical and as we can see by the rest of this information that's listed in these responsibilities we don't really see anything about compliance these are going to be all things that are more technical based so understanding current vulnerabilities reports for network and host-based security solutions so we don't see a lot of non-technical things that are listed in here if we scroll down here a little bit more we can really start to see that as well so tcpip which wasn't listed in any of the other jobs but really with all these bullet points they're much more technically focused again there's not a lot of non-technical things like compliance frameworks and things like that they're listed this is the last job that i found and this is another cyber security job so we can start seeing as we start looking into this job similar things to that previous job start seeing things like looking through security logs looking for malicious behavior identifying privacy breaches and malware threats now something interesting with this job is you do have to communicate with clients or customers because this is actually working for a consulting company called deloitte and when you work for a consulting company regardless of the job you have you're going to have to interact with your customers if you're working for just a normal company you could have a very technical role where you actually don't have to interact with people outside of your department so it just kind of depends and if we scroll down here a little bit more and see what else is listed here we can start to see similar things again to that previous job so we see routing protocols like bgp and ospf http and https programming experience data analytics malware analysis so these are all more technical things and i hope that this helped you as we went through some of these different roles to see the different things that i pick up on when i look at different positions typically especially if you're just looking at the specific requirements in the job not necessarily the title a lot of times jobs will be listed correctly but you might see something like a cyber security job that has no technical aspects in it or maybe it's more of an information assurance type of job so just be on the lookout that the title does not explain the whole story and that's why it's important to read through the job description and kind of formulate in your head what you think that position is going to be like and then if you get an interview you have to hammer on those points to find out what it's really like don't just anticipate that the company listed everything correctly you might actually be in an interview find out the job is completely different than what they described in the position posting question of the day do you work in information assurance or information security or maybe cyber security what are some of your daily tasks let me know down in the comment section below in this video we walk through the terms information assurance information security and cyber security to make sure that you have an understanding of the similarities and the differences we also reviewed some job postings to see how the terms are used in the real world a always make sure to leave a like comment and subscribe check out my website at johngood.com for more training without distracting interruptions or advertisements and i'll see you next [Music] time [Music] you