DOCSLIB.ORG

Cybersecurity Basics

Total Page：16

File Type：pdf, Size：1020Kb

Download full-text PDF Read full-text
Cybersecurity Basics CYBERSECURITY FOR SMALL BUSINESS CYBERSECURITY BASICS Knowing some cybersecurity basics and Cyber criminals target putting them in practice will help you protect your business and reduce the risk companies of all sizes. of a cyber attack. PROTECT YOUR FILES & DEVICES Update your software Secure your files Require passwords This includes your apps, web Back up important files offline, Use passwords for all laptops, browsers, and operating on an external hard drive, or in tablets, and smartphones. systems. Set updates to the cloud. Make sure you store Don’t leave these devices happen automatically. your paper files securely, too. unattended in public places. Encrypt devices Use multi-factor authentication Encrypt devices and other media that Require multi-factor authentication to access areas contain sensitive personal information. of your network with sensitive information. This This includes laptops, tablets, requires additional steps beyond logging in with a smartphones, removable drives, backup password — like a temporary code on a smartphone tapes, and cloud storage solutions. or a key that’s inserted into a computer. LEARN MORE AT: FTC.gov/SmallBusiness CYBERSECURITY FOR SMALL BUSINESS PROTECT YOUR WIRELESS NETWORK Secure your router Change the default name and password, turn off remote management, and log out as the administrator once the router is set up. Use at least WPA2 encryption Make sure your router offers WPA2 or WPA3 encryption, and that it’s turned on. Encryption protects information sent over your network so it can’t be read by outsiders. MAKE SMART SECURITY YOUR BUSINESS AS USUAL Require strong passwords Train all staff Have a plan A strong password is at least Create a culture of security Have a plan for saving data, 12 characters that are a mix of by implementing a regular running the business, and numbers, symbols, and capital schedule of employee training. notifying customers if you lowercase letters. Update employees as you experience a breach. The FTC’s Never reuse passwords and find out about new risks and Data Breach Response: A Guide don’t share them on the phone, vulnerabilities. If employees for Business gives steps you in texts, or by email. don’t attend, consider blocking can take. You can find it at their access to the network. FTC.gov/DataBreach. Limit the number of unsuccessful log-in attempts to limit password-guessing attacks. LEARN MORE AT: FTC.gov/SmallBusiness CYBERSECURITY FOR SMALL BUSINESS Understanding THE NIST CYBERSECURITY FRAMEWORK You may have heard about the businesses of all sizes better understand, manage, and reduce their cybersecurity risk NIST Cybersecurity Framework, and protect their networks and data. The Framework is voluntary. It gives your business but what exactly is it? an outline of best practices to help you decide where to focus your time and money for And does it apply to you? cybersecurity protection. NIST is the National Institute of Standards and You can put the NIST Cybersecurity Framework Technology at the U.S. Department of Commerce. to work in your business in these five areas: The NIST Cybersecurity Framework helps Identify, Protect, Detect, Respond, and Recover. 1. IDENTIFY 2. PROTECT Make a list of all equipment, software, and data • Control who logs on to your network and uses you use, including laptops, smartphones, tablets, your computers and other devices. and point-of-sale devices. • Use security software to protect data. Create and share a company cybersecurity policy that covers: • Encrypt sensitive data, at rest and in transit. • Conduct regular backups of data. Roles and responsibilities for employees, vendors, and • Update security software regularly, automating anyone else with access to those updates if possible. sensitive data. • Have formal policies for safely disposing of electronic files and old devices. Steps to take to protect against • Train everyone who uses your computers, an attack and limit the damage if devices, and network about cybersecurity. one occurs. You can help employees understand their personal risk in addition to their crucial role in the workplace. LEARN MORE AT: FTC.gov/SmallBusiness CYBERSECURITY FOR SMALL BUSINESS 3. DETECT Monitor your computers Check your network Investigate any unusual for unauthorized personnel for unauthorized activities on your network access, devices (like USB users or connections. or by your staff. drives), and software. 4. RESPOND Have a plan for: • Notifying customers, employees, and others • Investigating and containing an attack. whose data may be at risk. • Updating your cybersecurity policy and • Keeping business operations up and running. plan with lessons learned. • Reporting the attack to law enforcement and • Preparing for inadvertent events other authorities. (like weather emergencies) that may put data at risk. Test your plan regularly. 5. RECOVER After an attack: Repair and restore the Keep employees and customers equipment and parts of your informed of your response and network that were affected. recovery activities. For more information on the NIST Cybersecurity Framework and resources for small businesses, go to NIST.gov/CyberFramework and NIST.gov/Programs-Projects/Small-Business-Corner-SBC. LEARN MORE AT: FTC.gov/SmallBusiness CYBERSECURITY FOR SMALL BUSINESS PHYSICAL SECURITY An employee accidentally leaves a flash drive Cybersecurity begins with on a coffeehouse table. When he returns hours strong physical security. later to get it, the drive — with hundreds of Social Security numbers saved on it — is gone. Lapses in physical security can expose Another employee throws stacks of old company sensitive company data to identity theft, bank records into a trash can, where a criminal with potentially serious consequences. finds them after business hours. For example: A burglar steals files and computers from your office after entering through an unlocked window. HOW TO PROTECT EQUIPMENT & PAPER FILES Here are some tips for protecting information in paper files and on hard drives, flash drives, laptops, point-of-sale devices, and other equipment. Store securely Limit physical Send reminders Keep stock When paper files or access Remind employees to Keep track of and electronic devices When records or put paper files in locked secure any devices contain sensitive devices contain file cabinets, log out that collect sensitive information, store sensitive data, of your network and customer information. them in a locked allow access only to applications, and never Only keep files and cabinet or room. those who need it. leave files or devices data you need and with sensitive data know who has access unattended. to them. LEARN MORE AT: FTC.gov/SmallBusiness CYBERSECURITY FOR SMALL BUSINESS HOW TO PROTECT DATA ON YOUR DEVICES A burglary, lost laptop, stolen mobile phone, or misplaced flash drive — all can happen due to lapses in physical security. But they’re less likely to result in a data breach if information on those devices is protected. Here are a few ways to do that: Require complex passwords Require passwords that are long, complex, and unique. And make sure that these passwords are stored securely. Consider using a password manager. Use multi-factor authentication Require multi-factor authentication to access areas of your network with sensitive information. This requires additional steps beyond logging in with a password — like a temporary code on a smartphone or a key that’s inserted into a computer. Limit login attempts Limit the number of incorrect login attempts allowed to unlock devices. This will help protect against intruders. Encrypt Encrypt portable media, including laptops and thumb drives, that contain sensitive information. Encrypt any sensitive data you send outside of the company, like to an accountant or a shipping service. Include physical security in your regular employee trainings and TRAIN communications. Remind employees to: YOUR EMPLOYEES Shred documents Promote security practices Always shred documents in all locations with sensitive information Maintain security practices even if working before throwing them away. remotely from home or on business travel. Erase data correctly Know the response plan Use software to erase data All staff should know what to do if before donating or discarding equipment or paper files are lost or old computers, mobile devices, stolen, including whom to notify and digital copiers, and drives. what to do next. Use Data Breach Don’t rely on “delete” alone. Response: A Guide for Business for help That does not actually remove creating a response plan. You can find it the file from the computer. at FTC.gov/DataBreach. LEARN MORE AT: FTC.gov/SmallBusiness CYBERSECURITY FOR SMALL BUSINESS RANSOMWARE Someone in your company The attackers ask for money or cryptocurrency, but even if you pay, you don’t know if the gets an email. cybercriminals will keep your data or destroy your files. Meanwhile, the information you It looks legitimate — but with one click on need to run your business and sensitive a link, or one download of an attachment, details about your customers, employees, everyone is locked out of your network. That and company are now in criminal hands. link downloaded software that holds your data Ransomware can take a serious toll on your hostage. That’s a ransomware attack. business. HOW IT Criminals can start a ransomware HAPPENS attack in a variety of ways. Scam emails Server with links and attachments that vulnerabilities put your data and network at risk. which can be exploited These phishing emails make up by hackers. most ransomware attacks. Infected websites Online ads that automatically download that contain malicious code malicious software onto — even on websites you your computer. know and trust. LEARN MORE AT: FTC.gov/SmallBusiness CYBERSECURITY FOR SMALL BUSINESS HOW TO PROTECT YOUR BUSINESS Have a plan How would your business stay up and running after a ransomware attack? Put this plan in writing and share it with everyone who needs to know. Back up your data Regularly save important files to a drive or server that’s not connected to your network.
Load more

Recommended publications
  • BEST PRACTICES in Anti-Terrorism Security for Sporting and Entertainment Venues RESOURCE GUIDE
    Command, Control and Interoperability Center for Advanced Data Analysis A Department of Homeland Security University Center of Excellence BEST PRACTICES in Anti-Terrorism Security for Sporting and Entertainment Venues RESOURCE GUIDE July 2013 Table of Contents Introduction to the Project ............................................................................................................7 Background...................................................................................................................................8 Identifying Best Practices in Anti-Terrorism Security in Sports Venues ......................................8 Identifying the Key Best Practices and Developing Metrics for Each .........................................11 Developing a Best Practices Resource Guide .............................................................................13 Testing the Guid e ........................................................................................................................13 Executive Summary....................................................................................................................13 Chapter 1 – Overview.................................................................................................................15 1.1 Introduction...........................................................................................................................15 1.2 Risk Assessment ...................................................................................................................15
    [Show full text]
  • DDS Security Specification Will Have Limited Interoperability with Implementations That Do Implement the Mechanisms Introduced by This Specification
    An OMG® DDS Security™ Publication DDS Security Version 1.1 OMG Document Number: formal/2018-04-01 Release Date: July 2018 Standard Document URL: https://www.omg.org/spec/DDS-SECURITY/1.1 Machine Consumable Files: Normative: https://www.omg.org/spec/DDS-SECURITY/20170901/dds_security_plugins_spis.idl https://www.omg.org/spec/DDS-SECURITY/20170901/omg_shared_ca_governance.xsd https://www.omg.org/spec/DDS-SECURITY/20170901/omg_shared_ca_permissions.xsd https://www.omg.org/spec/DDS-SECURITY/20170901/dds_security_plugins_model.xmi Non-normative: https://www.omg.org/spec/DDS-SECURITY/20170901/omg_shared_ca_governance_example.xml https://www.omg.org/spec/DDS-SECURITY/20170901/omg_shared_ca_permissions_example.xml Copyright © 2018, Object Management Group, Inc. Copyright © 2014-2017, PrismTech Group Ltd. Copyright © 2014-2017, Real-Time Innovations, Inc. Copyright © 2017, Twin Oaks Computing, Inc. Copyright © 2017, THALES USE OF SPECIFICATION – TERMS, CONDITIONS & NOTICES The material in this document details an Object Management Group specification in accordance with the terms, conditions and notices set forth below. This document does not represent a commitment to implement any portion of this specification in any company's products. The information contained in this document is subject to change without notice. LICENSES The companies listed above have granted to the Object Management Group, Inc. (OMG) a nonexclusive, royalty-free, paid up, worldwide license to copy and distribute this document and to modify this document and distribute copies of the modified version. Each of the copyright holders listed above has agreed that no person shall be deemed to have infringed the copyright in the included material of any such copyright holder by reason of having used the specification set forth herein or having conformed any computer software to the specification.
    [Show full text]
  • Fedramp SECURITY ASSESSMENT FRAMEWORK
    FedRAMP SECURITY ASSESSMENT FRAMEWORK Version 2.4 November 15, 2017 EXECUTIVE SUMMARY This document describes a general Security Assessment Framework (SAF) for the Federal Risk and Authorization Management Program (FedRAMP). FedRAMP is a Government-wide program that provides a standardized approach to security assessment, authorization, and continuous monitoring for cloud-based services. FedRAMP uses a “do once, use many times” framework that intends to save costs, time, and staff required to conduct redundant Agency security assessments and process monitoring reports. FedRAMP was developed in collaboration with the National Institute of Standards and Technology (NIST), the General Services Administration (GSA), the Department of Defense (DOD), and the Department of Homeland Security (DHS). Many other Government Agencies and working groups participated in reviewing and standardizing the controls, policies and procedures. | i DOCUMENT REVISION HISTORY DATE VERSION PAGE(S) DESCRIPTION AUTHOR Major revision for NIST SP 800-53 Revision 4. 06/06/2014 2.0 All FedRAMP PMO Includes new template and formatting changes. Formatting changes throughout. Clarified distinction 12/04/2015 2.1 All between 3PAO and IA. Replaced Figures 2 and 3, and FedRAMP PMO Appendix C Figures with current images. 06/06/2017 2.2 Cover Updated logo FedRAMP PMO Removed references to CSP Supplied Path to 11/06/2017 2.3 All Authorization and the Guide to Understanding FedRAMP PMO FedRAMP as they no longer exist. 11/15/2017 2.4 All Updated to the new template FedRAMP PMO HOW TO CONTACT US Questions about FedRAMP or this document should be directed to [email protected]. For more information about FedRAMP, visit the website at http://www.fedramp.gov.
    [Show full text]
  • Global Terrorism: IPI Blue Paper No. 4
    IPI Blue Papers Global Terrorism Task Forces on Strengthening Multilateral Security Capacity No. 4 2009 INTERNATIONAL PEACE INSTITUTE Global Terrorism Global Terrorism Task Forces on Strengthening Multilateral Security Capacity IPI Blue Paper No. 4 Acknowledgements The International Peace Institute (IPI) owes a great debt of gratitude to its many donors to the program Coping with Crisis, Conflict, and Change. In particular, IPI is grateful to the governments of Belgium, Canada, Denmark, Finland, Greece, Luxembourg, the Netherlands, Norway, Spain, Sweden, Switzerland, and the United Kingdom. The Task Forces would also not have been possible without the leadership and intellectual contribution of their co-chairs, government representatives from Permanent Missions to the United Nations in New York, and expert moderators and contributors. IPI wishes to acknowledge the support of the Greentree Foundation, which generously allowed IPI the use of the Greentree Estate for plenary meetings of the Task Forces during 2008. note Meetings were held under the Chatham House Rule. Participants were invited in their personal capacity. This report is an IPI product. Its content does not necessarily represent the positions or opinions of individual Task Force participants. suggested citation: International Peace Institute, “Global Terrorism,” IPI Blue Paper No. 4, Task Forces on Strengthening Multilateral Security Capacity, New York, 2009. © by International Peace Institute, 2009 All Rights Reserved www.ipinst.org CONTENTS Foreword, Terje Rød-Larsen. vii Acronyms. x Executive Summary. 1 The Challenge for Multilateral Counterterrorism. .6 Ideas for Action. 18 I. strengThen Political SupporT For The un’S role In CounTerIng Terrorism ii. enhanCe straTegic CommunicationS iii. deePen relationShips BeTween un head- quarTerS and national and regIonal parTnerS Iv.
    [Show full text]
  • Federal Bureau of Investigation Department of Homeland Security
    Federal Bureau of Investigation Department of Homeland Security Strategic Intelligence Assessment and Data on Domestic Terrorism Submitted to the Permanent Select Committee on Intelligence, the Committee on Homeland Security, and the Committee of the Judiciary of the United States House of Representatives, and the Select Committee on Intelligence, the Committee on Homeland Security and Governmental Affairs, and the Committee of the Judiciary of the United States Senate May 2021 Page 1 of 40 Table of Contents I. Overview of Reporting Requirement ............................................................................................. 2 II. Executive Summary ......................................................................................................................... 2 III. Introduction...................................................................................................................................... 2 IV. Strategic Intelligence Assessment ................................................................................................... 5 V. Discussion and Comparison of Investigative Activities ................................................................ 9 VI. FBI Data on Domestic Terrorism ................................................................................................. 19 VII. Recommendations .......................................................................................................................... 27 Appendix ....................................................................................................................................................
    [Show full text]
  • The Interim National Security Strategic Guidance
    March 29, 2021 The Interim National Security Strategic Guidance On March 3, 2021, the White House released an Interim and what the right emphasis - in terms of budgets, priorities, National Security Strategic Guidance (INSSG). This is the and activities—ought to be between the different kinds of first time an administration has issued interim guidance; security challenges. The 2017 Trump Administration NSS previous administrations refrained from issuing formal framed the key U.S. national security challenge as one of guidance that articulated strategic intent until producing the strategic competition with other great powers, notably congressionally mandated National Security Strategy (NSS) China and Russia. While there were economic dimensions (originating in the Goldwater-Nichols Department of to this strategic competition, the 2017 NSS emphasized Defense Reorganization Act of 1986 P.L. 99-433, §603/50 American military power as a key part of its response to the U.S.C §3043). The full NSS is likely to be released later in challenge. 2021 or early 2022. By contrast, the Biden INSSG appears to invert traditional The INSSG states the Biden Administration’s conceptual national security strategy formulations, focusing on approach to national security matters as well as signaling its perceived shortcomings in domestic social and economic key priorities, particularly as executive branch departments policy rather than external threats as its analytic starting and agencies prepare their Fiscal Year (FY) 2022 budget point. The Biden Administration contends that the lines submissions. With respect to the latter, FY2022 will be the between foreign and domestic policy have been blurred to first budget prepared after the expiration of the budget caps the point of near nonexistence.
    [Show full text]
  • Principles for Software Assurance Assessment a Framework for Examining the Secure Development Processes of Commercial Technology Providers
    Principles for Software Assurance Assessment A Framework for Examining the Secure Development Processes of Commercial Technology Providers PRIMARY AUTHORS: Shaun Gilmore, Senior Security Program Manager, Trustworthy Computing, Microsoft Corporation Reeny Sondhi, Senior Director, Product Security Engineering, EMC Corporation Stacy Simpson, Director, SAFECode © 2015 SAFECode – All Rights Reserved. Principles for Software Assurance Assessment Table of Contents Foreword ��������������������������������������������������������������������������������������������������������������������������������� 3 Methodology �������������������������������������������������������������������������������������������������������������������������� 3 Problem Statement ���������������������������������������������������������������������������������������������������������������� 4 Framework Overview ������������������������������������������������������������������������������������������������������������� 5 Guiding Principles for Software Security Assessment ����������������������������������������������������������������������6 The SAFECode Supplier Software Assurance Assessment Framework ������������������������������ 7 What Are Your Risk Management Requirements? ����������������������������������������������������������������������������7 The Tier Three Assessment �����������������������������������������������������������������������������������������������������������������8 The Tier One and Tier Two Assessments ���������������������������������������������������������������������������������������������8
    [Show full text]
  • Small Business Information Security: the Fundamentals
    NISTIR 7621 Small Business Information Security: The Fundamentals Richard Kissel NISTIR 7621 Small Business Information Security: The Fundamentals Richard Kissel Computer Security Division Information Technology Laboratory National Institute of Standards and Technology Gaithersburg, MD 20899 October 2009 U.S. Department of Commerce Gary Locke, Secretary National Institute of Standards and Technology Patrick D. Gallagher, Deputy Director Acknowledgements The author, Richard Kissel, wishes to thank his colleagues and reviewers who contributed greatly to the document’s development. Special thanks goes to Mark Wilson, Shirley Radack, and Carolyn Schmidt for their insightful comments and suggestions. Kudos to Kevin Stine for his awesome Word editing skills. Certain commercial entities, equipment, or materials may be identified in this document in order to describe and experimental procedure or concept adequately. Such identification is not intended to imply recommendation or endorsement by the National Institute of Standards and Technology, nor is it intended to imply that the entities, materials, or equipment are necessarily the best available for the purpose. i Table of Contents Overview...................................................................................................................................................... 1 1. Introduction.......................................................................................................................................... 1 2. The “absolutely necessary” actions that a small
    [Show full text]
  • An Introduction to Computer Security: the NIST Handbook U.S
    HATl INST. OF STAND & TECH R.I.C. NIST PUBLICATIONS AlllOB SEDS3fl NIST Special Publication 800-12 An Introduction to Computer Security: The NIST Handbook U.S. DEPARTMENT OF COMMERCE Technology Administration National Institute of Standards Barbara Guttman and Edward A. Roback and Technology COMPUTER SECURITY Contingency Assurance User 1) Issues Planniii^ I&A Personnel Trairang f Access Risk Audit Planning ) Crypto \ Controls O Managen»nt U ^ J Support/-"^ Program Kiysfcal ~^Tiireats Policy & v_ Management Security Operations i QC 100 Nisr .U57 NO. 800-12 1995 The National Institute of Standards and Technology was established in 1988 by Congress to "assist industry in the development of technology . needed to improve product quality, to modernize manufacturing processes, to ensure product reliability . and to facilitate rapid commercialization ... of products based on new scientific discoveries." NIST, originally founded as the National Bureau of Standards in 1901, works to strengthen U.S. industry's competitiveness; advance science and engineering; and improve public health, safety, and the environment. One of the agency's basic functions is to develop, maintain, and retain custody of the national standards of measurement, and provide the means and methods for comparing standards used in science, engineering, manufacturing, commerce, industry, and education with the standards adopted or recognized by the Federal Government. As an agency of the U.S. Commerce Department's Technology Administration, NIST conducts basic and applied research in the physical sciences and engineering, and develops measurement techniques, test methods, standards, and related services. The Institute does generic and precompetitive work on new and advanced technologies. NIST's research facilities are located at Gaithersburg, MD 20899, and at Boulder, CO 80303.
    [Show full text]
  • The Basic Components of an Information Security Program MBA Residential Technology Forum (RESTECH) Information Security Workgroup
    ONE VOICE. ONE VISION. ONE RESOURCE. The Basic Components of an Information Security Program MBA Residential Technology Forum (RESTECH) Information Security Workgroup 20944 MBA.ORG Copyright © October 2019 by Mortgage Bankers Association. All Rights Reserved. Copying, selling or otherwise distributing copies and / or creating derivative works for commercial purposes is strictly prohibited. Although significant efforts have been used in preparing this guide, MBA makes no representations or warranties with respect to the accuracy and completeness of the contents. If legal advice or other expert assistance is needed, competent professionals should be consulted. Copying in whole or in part for internal business purposes and other non-commercial uses is permissible provided attribution to Mortgage Bankers Association is included, either through use of the previous paragraph (when copying / distributing the white paper in full) or the following (when distributing or including portions in a derivative work): “Source: Mortgage Bankers Association, The Basic Components of an Informa- tion Security Program, by the Information Security Work Group of the MBA Residential Technology Forum (RESTECH), 2019, [page(s)].” Table of Contents Preface . 1 1. Introduction . 2 2. Laws and Regulations for .Information . Security. 5 3. First Priority Cybersecurity Practices . .6 . 3.1 Manage Risk. .6 3.2 Protect your Endpoints . 6 3.3 Protect Your Internet . Connection. .7 3.4 Patch Your Operating Systems and Applications . 8 . 3.5 Make Backup Copies of Important Business. Data / Information. .8 3.6 Control Physical Access to Your Computers and Network Components . 9 . 3.7 Secure Your Wireless Access Points. .and . Networks. 10 3.8 Train Your Employees in Basic .
    [Show full text]
  • Understanding the Emerging Era of International Competition Theoretical and Historical Perspectives
    Research Report C O R P O R A T I O N MICHAEL J. MAZARR, JONATHAN BLAKE, ABIGAIL CASEY, TIM MCDONALD, STEPHANIE PEZARD, MICHAEL SPIRTAS Understanding the Emerging Era of International Competition Theoretical and Historical Perspectives he most recent U.S. National Security KEY FINDINGS Strategy is built around the expectation ■ The emerging competition is not generalized but likely to of a new era of intensifying international be most intense between a handful of specific states. Tcompetition, characterized by “growing political, economic, and military competitions” ■ The hinge point of the competition will be the relation- confronting the United States.1 The new U.S. ship between the architect of the rules-based order (the United States) and the leading revisionist peer competitor National Defense Strategy is even more blunt that is involved in the most specific disputes (China). about the nature of the emerging competition. “We are facing increased global disorder, ■ Global patterns of competition are likely to be complex and diverse, with distinct types of competition prevailing characterized by decline in the long-standing 2 in different issue areas. rules-based international order,” it argues. “Inter-state strategic competition, not terrorism, ■ Managing the escalation of regional rivalries and conflicts is now the primary concern in U.S. national is likely to be a major focus of U.S. statecraft. security.”3 The document points to the ■ Currently, the competition seems largely focused on “reemergence of long-term, strategic competition status grievances or ambitions, economic prosperity, by what the National Security Strategy classifies technological advantage, and regional influence. as revisionist powers.”4 It identifies two ■ The competition is likely to be most intense and per- countries as potential rivals: China and Russia.
    [Show full text]
  • Food Security Through Biodiversity Conservation
    2011 International Conference on Asia Agriculture and Animal IPCBEE vol.13 (2011) © (2011)IACSIT Press, Singapoore FOOD SECURITY THROUGH BIODIVERSITY CONSERVATION Dr. I.SUNDAR Associate Professor of Economics, Directorate of Distance Education, Annamalai University. Abstract. The importance of biodiversity to food security is well recognized. About three-quarters of the varietals genetic diversity of agricultural crops have been lost over the last century and that hundreds of the 7000 animal breeds are threatened by extinction. Just twelve crops and fourteen animal species now provide most of the world’s food. Fewer genetic diversity means fewer opportunities for the growth and innovation needed to boost agriculture at a time of soaring food prices. Furthermore, as biodiversity used in food and agriculture declines, the food supply becomes more vulnerable and unsustainable. Reduction of biodiversity entails a reduction of options for ensuring more diverse nutrition, enhancing food production, raising incomes, coping with environmental constraints and managing ecosystems. Recognizing, safeguarding and using the potential and diversity of nature is critical for food security and sustainable agriculture. This paper deals with importance of biodiversity conservation on food security. It outlines the genetic erosion in agriculture and importance of agricultural genetic resources. This paper makes a detailed discussion on role of agriculture biodiversity in food security and declining situation in domesticated plant diversity. The major food crops under the risk of extinction are spelt out in paper. Further attempts are made to examine the role of marine biodiversity in food security. This paper concludes with some policy measures to promote the biodiversity conservation towards food security.
    [Show full text]