Information Security for startups was presented on 11 September 2010 at the Barcamp meeting in Antwerp, Belgium. It presents issues, tips and interesting information security pointers for startup businesses in the world of e-commerce.

1. Information Security for startups
Stijn Vande Casteele
@securityworld
trusted@gmail.com

2. Overview
➲Introduction
➲Your world
➲My world
➲Tips
➲Pointers

3. Introduction
➲ Information Security Architect
● MSc in InfoSec, CISSP, GCFA
● Ubizen(VzB), Telindus/Belgacom > Deloitte.
➲ Startup experience
● Scanit, ArcSight, Indio

4. Your world
➲ Online
➲ Social media
➲ IT, Technology
➲ Time is money
➲ Grow (pains)
➲ Partners (offshore) (cheap/uptime/perf)
➲ The cloud

5. My world
➲ Risk analysis & management
➲ People, Process, Technology
➲ Confidentiality
➲ Integrity
➲ Availability

6. Tips
➲ Can you trust your partners? SLA? Reports?
➲ Are secure coding techniques used?
➲ Who has access to your backend? Cloud?
➲ Protect your most critical information
➲ Work out a backup/restore method (DRP)
➲ Know what to do in case of a security incident
➲ Logs?!
➲ Look for expert
➲ Keep an eye on the darkside

7. Pointers
➲ http://isc.sans.edu
➲ http://www.h-online.com/
➲ http://www.owasp.org
➲ https://www.ecops.be
➲ https://www.cert.be
➲ http://www.rootsecure.net/

8. Questions?