CHAPTER 1: SECURITY PRINCIPLES 2.

IDS and IPS

MODULE 3: SECURITY CONTROL 3. Access Control

4. Antivirus Software

Security Control 5. Encryption

 It pertains to the physical, technical, and 6. Authentication Mechanism

administrative mechanisms that act as
safeguards or countermeasures prescribed for an
information system to protect the confidentiality,
integrity and availability of the system and its
MODULE 4: GOVERNANCE ELEMENTS
information.
TYPES OF SECURITY CONTROL
1. Physical Control Governance Element

2. Administrative Control  It refer to the principles, structures, and

processes that guide decision-making,
3. Technical Control coordination, and management within the
network.

PHYSICAL CONTROL

 It refers to measures taken to physically protect

assets, resources, or individuals from
unauthorized access, damage, theft, or harm.
Examples are:
1. Surveillance Camera
2. Biometric
LAWS & REGULATION
3. Identity Cards
 It refers to the body of legal rules, statutes,
4. Alarm System regulations, and principles that govern various
ADMINISTRATIVE CONTROL aspects of industrial activities.
 These are established by governments at the
 Also known as Procedural Controls. local, national, and international levels to
 These are security measures implemented regulate industrial operations.
through administrative or managerial policies,  Ensure safety.
procedures, guidelines, and practices.
 Protect the environment.
Examples:  Promote fair competition and safeguard the
rights of workers and consumers.
1. Security Policies and Procedures
Laws and Regulations in Industrial Network:
2. Security Training and Awareness Programs
1. Health and Safety Law
3. Personnel Security Measures
2. Environmental Law
4. Access Control Policies
3. Product Liability Law
5. Incident Response and Reporting Procedures
4. Intellectual Property Law
6. Compliance and Auditing Processes
5. Employment Law
7. Change Management Procedures
6. Trade Law
TECHNICAL CONTROL
7. Competition Law
 Also known as logical controls.
 These are security measures implemented 8. Data Privacy and Security Law
through technology to protect information
9. Contract Law
systems, networks, and data from unauthorized
access, alteration, or destruction.
Examples:
1. Firewall
1. HEALTH AND SAFETY LAW 8. DATA PRIVACY AND SECURITY LAW

 It is ensure the protection of workers and the  It regulate the collection, use, storage, and
public from occupational hazards and risks protection of personal and sensitive data in
associated with industrial activities. industrial operations.
 These laws may cover areas such as workplace  These laws impose requirements for data
safety, equipment standards, hazardous materials handling practices, security measures, and
handling, and emergency response protocols. notification obligations in the event of data
breaches.
2. ENVIRONMENTAL LAW
9. CONTRACT LAW
 It regulate industrial activities to minimize their
impact on the environment and natural  It governs the legal agreements and obligations
resources. between parties involved in industrial
 These laws may include regulations on air and transactions, including manufacturers, suppliers,
water pollution, waste management, emissions distributors, and customers.
control, and conservation efforts.  These laws establish rights, duties, and remedies
for breaches of contract and ensure
3. PRODUCT LIABILITY LAW
enforceability of contractual agreements.
 Govern the legal responsibilities of
manufacturers, distributors, and sellers for the
safety and quality of their products. STANDARD
 These laws hold companies accountable for any
 It is a documented set of guidelines, criteria,
harm or injury caused by defective or unsafe
specifications, or requirements established by
products and may impose liability for damages
authority and used as a reference for ensuring
and compensation.
consistency, quality, safety and performance in a
4. INTELLECTUAL PROPERTY LAW particular field or industry.

 Protect the rights of industrial companies to their Key Characteristics of Standard:

innovations, designs, trademarks, and 1.Consistency and Uniformity
copyrights.
 These laws include patents, trademarks, 2.Quality Assurance
copyrights, and trade secret protections, which 3.Interoperability
enable companies to safeguard their intellectual
assets and maintain a competitive edge in the 4.Safety and Risk Management
market.
5.Regulatory Compliance
5. EMPLOYMENT LAW

 It regulate the relationship between employers 1. CONSISTENCY AND UNIFORMITY

and employees in industrial workplaces.
 These laws cover areas such as wages, working  Refer to the adherence to standardized
hours, benefits, anti-discrimination practices, processes, procedures, specifications, and
and health and safety standards for workers. quality across various aspects of industrial
operations.
6. TRADE LAW
CONSISTENCY
 Promote fair competition and prevent
anticompetitive practices that may harm o Refers to the reliability and
consumers or restrict market competition. predictability of outcomes or
 These laws prohibit activities such as performance over time.
o It involves maintaining a steady level of
pricefixing, market allocation, monopolistic
behavior, and unfair business practices. quality, and efficiency in operations,
regardless of variations in external
7. COMPETITION LAW factors or inputs.

 Promote fair competition and prevent UNIFORMITY

anticompetitive practices that may harm
o It involves ensuring that all components,
consumers or restrict market competition.
procedures, and outputs conform to
 These laws prohibit activities such as
established standards or specifications.
pricefixing, market allocation, monopolistic
o This can include uniformity in product
behavior, and unfair business practices.
design, manufacturing processes, safety
protocols, measurement standards.
2. QUALTIY ASSURANCE EXAMPLES OF PROCEDURE:

 It refers to the systematic processes, procedures, 1. Safety Procedure

and practices implemented to ensure that
2. Manufacturing Procedure
products or services meet specified quality
standards and requirements. 3. Maintenance Procedure
 It encompasses a range of activities aimed at
preventing defects, errors, and inconsistencies in 4. Quality Control Procedure
production processes, thereby ensuring that the 5. Administrative Procedure
final output meets or exceeds customer
expectations. 1. SAFETY PROCEDURE

3. INTEROPERABILITY  These are established guidelines and protocols

designed to prevent accidents, injuries, and
 It refers to the ability of various systems, hazards in the workplace.
devices, machines, and software applications to  It provides specific steps and actions that
communicate, exchange data, and work together employees, contractors, and visitors must follow
seamlessly within an industrial environment. to maintain a safe working environment.
4. SAFETY AND RISK MANAGEMENT

 Identifying hazards, specifying safety measures, EXAMPLES OF SAFETY PROCEDURE

and establishing guidelines for minimizing risks
and preventing accidents or harm to users, a) Personal Protective Equipment (PPE)
workers, or the environment. b) Machine and Equipment Safety
5. REGULATORY COMPLIANCE c) Hazardous Material Handling
d) Emergency Response
 Align with regulatory requirements and
industryspecific regulations by providing e) Electrical Safety
guidelines and benchmarks for organizations to f) Fire Safety
demonstrate compliance and meet legal
obligations in areas such as safety, g) Chemical Safety
environmental protection, and consumer h) Workplace Ergonomics
protection.
i) Safety Training and Communications

2. MANUFACTURING PROCEDURE
POLICY
 Also known as a Production Process.
 It refers to a set of guidelines, rules or principles  Refers to a series of steps and activities that are
established by an organization to govern various systematically followed to transform raw
aspects of its operations, practices, or behavior. materials, components, or resources into
 To ensure the smooth operation of facilities, the finished products.
safety of workers, compliance with regulations,
and the achievement of organizational goals. EXAMPLES OF MANUFACTURING
PROCEDURE
a) Product Design and Development
PROCEDURE
b) Materials Procurement and Inventory
 It refers to a documented set of steps or Management
instructions outlining how to perform a specific
task, operation, or process within an c) Production Planning and Scheduling
organization. d) Manufacturing Operations
 It provide detailed guidance to employees,
contractors, or stakeholders on the proper e) Quality Control and Inspection
sequence of actions, methods, tools, and
f) Packaging and Labeling
resources required to achieve a desired outcome
efficiently, safely, and consistently. g) Maintenance and Repair
h) Continuous Improvement
i) Compliance and Regulations
3. MAINTENANCE PROCEDURE

 It is systematic steps and activities required to

ensure the reliability, availability, and
 performance of equipment, machinery, or
facilities over time.
 These are essential for preventing equipment
failures, minimizing downtime, optimizing
performance, and extending the lifespan of
assets.
4. QUALITY CONTROL PROCEDURE

 It is a systematic steps and activities

implemented to ensure that products, processes,
or services meet specified quality standards and
requirements.
 These are essential for detecting defects,
preventing non-conformities, and maintaining
consistent quality throughout the production
process.
 It involve various inspection, testing, and
verification activities aimed at identifying and
addressing quality issues to ensure customer
satisfaction and compliance with regulatory
requirements.
5. ADMINISTRATIVE PROCEDURE

 It refer to the structured processes and

guidelines established to manage administrative
tasks, operations, and functions within an
organization.
 These procedures ensure that administrative
activities are performed efficiently, consistently,
and in compliance with organizational policies,
regulations, and best practices.

EXAMPLES OF ADMINISTRATIVE
PROCEDURE
a) Human Resource Management
b) Finance and Accounting
c) Procurement and Purchasing
d) Facilities Management
e) Documentation Control and Records
Management
f) Compliance Management
g) Information Technology Management
h) Meeting and Event Management
i) Travel and Expense Management
j) Communication and Correspondence