Skip to content

Commit f18aa33

Browse files
ruslanbaidanruslanbaidan
committed
Added the next training details.
1 parent 891a010 commit f18aa33

File tree

10 files changed

+538
-2
lines changed

10 files changed

+538
-2
lines changed

‎.github/workflows/latex.yml

+8-2
Original file line numberDiff line numberDiff line change
@@ -73,6 +73,12 @@ jobs:
7373
working_directory: 20240918
7474
root_file: 20240918_MONARC-training.tex
7575

76+
- name: Compile LaTeX document
77+
uses: xu-cheng/latex-action@master
78+
with:
79+
working_directory: 20241206
80+
root_file: 20241206_MONARC-training.tex
81+
7682
- run: mkdir -p artifact
7783
- run: mv 20200212/20200212_MONARC-training.pdf artifact/
7884

@@ -102,9 +108,9 @@ jobs:
102108

103109
- run: mkdir -p artifact
104110
- run: mv 20231206/20231206_MONARC-training.pdf artifact/
105-
111+
106112
- run: mkdir -p artifact
107-
- run: mv 20240918/20240918_MONARC-training.pdf artifact/
113+
- run: mv 20241206/20241206_MONARC-training.pdf artifact/
108114

109115
- uses: actions/upload-artifact@v4
110116
with:

‎20241206/1-introduction/introduction.tex

+108
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,108 @@
1+
%
2+
% SECTION: Luxembourg House of Cybersecurity
3+
%
4+
\section*{Who we are - Our history}
5+
\begin{frame}
6+
% \frametitle{Luxembourg House of Cybersecurity / Our history}
7+
\begin{center}
8+
\begin{itemize}
9+
\item 2003: Cyberworld Awareness and Security Enhancement Services (\textbf{CASES});
10+
\item 2007: Computer Incident Response Center Luxembourg (\textbf{CIRCL});
11+
\item 2010: SECURITYMADEIN.LU is a \textit{GIE} (Groupement d’Intérêt Économique). CIRCL and CASES are department of SECURITYMADEIN.LU;
12+
\item 2017: Cyber security Competence Center (\textbf{C3}), a new department of SECURITYMADEIN.LU;
13+
\item On 17th Oct. 2022: SECURITYMADEIN.LU transformed into the Luxembourg House of Cybersecurity (\textbf{LHC})\\
14+
CASES and C3 are now the National Cybersecurity Competence Centre of Luxembourg (\textbf{NC3})
15+
\end{itemize}
16+
\end{center}
17+
CASES was an initiative of the Ministry of Economy after the worm
18+
\textit{I love you} decimated more than 3 millions computers in less than a week.
19+
\end{frame}
20+
21+
% \begin{frame}
22+
% \frametitle{CASES}
23+
% \framesubtitle{}
24+
% \begin{block}{Mission}
25+
% Foster cyber security by supporting Luxembourg administrations and SMEs.
26+
% \end{block}
27+
%
28+
% \begin{block}{Services}
29+
% \begin{center}
30+
% \begin{itemize}
31+
% \item \textbf{Awareness}: publications of articles and videos;
32+
% \item \textbf{Trainings}:
33+
% introduction to cyber security for different audiences;
34+
% \item \textbf{Software}:
35+
% MONARC, MOSP, Fit4Cybersecurity, etc.
36+
% \end{itemize}
37+
% \end{center}
38+
% \end{block}
39+
%
40+
% \begin{block}{Cooperations}
41+
% ANSSI-LU,
42+
% Centre for Cyber Security Belgium, KonzeptAcht GmbH, ILR, GRC-Luxembourg and others.
43+
% \end{block}
44+
% \end{frame}
45+
46+
% --------- Summary ---------
47+
\setcounter{tocdepth}{1}
48+
\begin{frame}
49+
\frametitle{Content at glance}
50+
\tableofcontents
51+
\end{frame}
52+
\setcounter{tocdepth}{4}
53+
% ----------------------------
54+
55+
%
56+
% SECTION: What is MONARC?
57+
%
58+
\section{What is MONARC?}
59+
\begin{frame}
60+
\frametitle{Summary}
61+
\tableofcontents[currentsection, hideothersubsections]
62+
\end{frame}
63+
\subsection{An open source software}
64+
\begin{frame}
65+
\frametitle{An open source software}
66+
\framesubtitle{}
67+
MONARC is the tool you need for an optimised, precise and repeatable risk assessment.
68+
69+
\bigskip
70+
\begin{itemize}
71+
\item Web application (SaaS, self-hosted, virtual machine, etc.);
72+
\item source code\footnote{\url{https://github.com/monarc-project}}:
73+
\texttt{GNU Affero General Public License version 3};
74+
\item data: \texttt{CC0 1.0 Universal - Public Domain Dedication}.
75+
\end{itemize}
76+
77+
\bigskip
78+
MONARC is easy to use.
79+
80+
Used and recognized by experts from different fields (not only information security).
81+
82+
\bigskip
83+
For many users, it started with a spreadsheet!
84+
\end{frame}
85+
86+
\subsection{A community}
87+
\begin{frame}
88+
\frametitle{A community}
89+
\framesubtitle{}
90+
\begin{itemize}
91+
\item more than 300 organizations:\\ \url{https://my.monarc.lu};
92+
\item 17 organizations sharing MONARC objects (threats, assets, recommendations, etc.):\\
93+
\url{https://objects.monarc.lu};
94+
\item a global dashboard with trends about threats and vulnerabilitties:\\
95+
\url{https://dashboard.monarc.lu};
96+
\item discussions on GitHub:\\
97+
\url{https://github.com/monarc-project/MonarcAppFO/discussions}.
98+
\end{itemize}
99+
\end{frame}
100+
101+
\subsection{A method}
102+
\begin{frame}
103+
\frametitle{A method}
104+
\framesubtitle{Based on \texttt{ISO/IEC 27005:2011}, but optimized}
105+
\begin{center}
106+
\includegraphics[scale=0.6]{../common_pictures/iso27005-2011.png}
107+
\end{center}
108+
\end{frame}

‎20241206/2-method/method.tex

+144
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,144 @@
1+
2+
%
3+
% SECTION: The method
4+
%
5+
\section{The method}
6+
\begin{frame}
7+
\frametitle{Summary}
8+
\tableofcontents[currentsection, hideothersubsections]
9+
\end{frame}
10+
11+
12+
\subsection{Management of risk}
13+
\begin{frame}
14+
\frametitle{A Structured, Iterative and Qualitative method}
15+
\framesubtitle{}
16+
\begin{columns}[t]
17+
\begin{column}{5.5cm}
18+
\begin{figure}
19+
\includegraphics[width=5.5cm]{../common_pictures/MONARC-method-1.png}
20+
\end{figure}
21+
\end{column}
22+
\begin{column}{6.5cm}
23+
\begin{itemize}
24+
\item Structured: 1, 2, ..., n.
25+
\item Iterative: \textbf{Plan}, \textbf{Do}, \textbf{Check}, \textbf{Act}
26+
\item Qualitative: \textbf{Values} / \textbf{Consequence}
27+
\begin{itemize}
28+
\item Impact/Consequence, Threat, Vulnerability;
29+
\item \textbf{r}eputation, image;
30+
\item \textbf{o}peration;
31+
\item \textbf{l}egal;
32+
\item \textbf{f}inancial;
33+
\item \textbf{p}erson (to the).
34+
\end{itemize}
35+
Possibility to define custom scales for operational risks.
36+
\end{itemize}
37+
\end{column}
38+
\end{columns}
39+
\end{frame}
40+
41+
\begin{frame}
42+
\frametitle{Automated and simplified management}
43+
\framesubtitle{Method based on \texttt{ISO/IEC 27005}}
44+
\begin{center}
45+
\includegraphics[scale=0.45]{../common_pictures/MONARC-method-2-2.png}
46+
\end{center}
47+
\end{frame}
48+
49+
\begin{frame}
50+
\frametitle{Automated and simplified management}
51+
\framesubtitle{Sub-stages provided by the method are also in line with \texttt{ISO/IEC 27005}}
52+
\begin{center}
53+
\includegraphics[scale=0.4]{../common_pictures/MONARC-method-2-1.png}
54+
\end{center}
55+
\end{frame}
56+
57+
\begin{frame}
58+
\begin{block}{Information risks}
59+
$$R = \textbf{I}mpact \times \textbf{T}hreat \times \textbf{V}ulnerability$$
60+
\begin{itemize}
61+
\item impact on \textbf{C}onfidentiality \textbf{I}ntegrity \textbf{A}vailability;
62+
\item on secondary assets.
63+
\end{itemize}
64+
\end{block}
65+
66+
\begin{block}{Operational risks}
67+
$$R = \textbf{I}mpact \times \textbf{P}robability$$
68+
\begin{itemize}
69+
\item impact by default on ROLFP (possibility to define custom scales);
70+
\item on primary assets.
71+
\end{itemize}
72+
\end{block}
73+
\end{frame}
74+
75+
76+
77+
\subsection{An optimized method}
78+
\begin{frame}
79+
\frametitle{Optimizations}
80+
\framesubtitle{}
81+
MONARC is an optimized method:
82+
\begin{itemize}
83+
\item inheritance on objects;
84+
\item scope of objects;
85+
\item inheritance on impacts;
86+
\item deliverables;
87+
\item multiple dashboards and reporting possibilities.
88+
\end{itemize}
89+
\end{frame}
90+
91+
\subsubsection{Inheritance on objects}
92+
\begin{frame}
93+
\frametitle{Inheritance on objects}
94+
\framesubtitle{Modelling}
95+
\begin{center}
96+
\includegraphics[scale=0.45]{../common_pictures/MONARC-method-modelling.png}
97+
\end{center}
98+
\end{frame}
99+
100+
\begin{frame}
101+
\frametitle{Inheritance}
102+
\framesubtitle{Formalisation of the modelling}
103+
\begin{center}
104+
\includegraphics[scale=0.5]{../common_pictures/MONARC-modelling-formalisation.png}
105+
\end{center}
106+
\end{frame}
107+
108+
\begin{frame}
109+
\frametitle{Inheritance}
110+
\framesubtitle{Formalisation of an asset}
111+
Example with \texttt{OV\_BATI}
112+
\begin{center}
113+
\includegraphics[scale=0.7]{../common_pictures/ov_bati.png}
114+
\end{center}
115+
\end{frame}
116+
117+
\subsubsection{Scope of objects}
118+
\begin{frame}
119+
\frametitle{Scope of objects}
120+
\framesubtitle{Global or local assets}
121+
\begin{center}
122+
\begin{center}
123+
\includegraphics[scale=0.45]{../common_pictures/global-vs-local.png}
124+
\end{center}
125+
\end{center}
126+
\end{frame}
127+
128+
\subsubsection{Inheritance on impacts}
129+
\begin{frame}
130+
\frametitle{Inheritance on impacts}
131+
\framesubtitle{}
132+
\begin{center}
133+
\begin{center}
134+
\includegraphics[width=12cm]{./pictures/impacts-inheritance.png}
135+
\end{center}
136+
\end{center}
137+
\end{frame}
138+
139+
\subsubsection{Deliverables}
140+
\begin{frame}
141+
\frametitle{Deliverables}
142+
\framesubtitle{}
143+
Shareable and customised templates of deliverables.
144+
\end{frame}

0 commit comments

Comments
 (0)