About the Internet Security Alliance

Mission: To use the collective experience of the members of the Internet Security Alliance to promote sound information security practices, policies, and technologies that enhance the security of the Internet and global information systems.  

The Internet Security Alliance (ISAlliance) was created to provide a forum for information sharing and thought leadership on information security issues. The ISAlliance represents corporate security interests before legislators and regulators, in so doing the alliance aims to identify and standardize best practices in Internet security and network survivability, while creating a collaborative environment to develop and implement information security solutions.

The Internet Security Alliance is a non-profit collaboration between the
Electronic Industries Alliance (EIA), a federation of trade associations, and Carnegie Mellon University's CyLab.

CyLab works closely with the CERT® Coordination Center (CERT/cc), a leading, recognized center of Internet security expertise.

Honorable Dave McCurdy, former Chairman House Intelligence Committee

 
The ISAlliance was founded in April of 2001 as the result of Former Chairman of the House Intelligence Committee of the U.S. House of Representatives, Dave McCurdy, collaborated with Rich Pethia, Director of the CERT/cc. Honorable McCurdy had become concerned about the state of corporate information security while working in Congress. Together with the CERT/cc he designed the ISAlliance to cut across industry to work together on the many problems of cyber security.

The ISAlliance is a unique trade association representing corporate interests from the Defense & Aerospace, Banking & Financial, Food Service, Entertainment, Telecommunications, and  Manufacturing industries.

The ISAlliance:

  • Works with legislative and regulatory bodies to ensure that market incentives are at the forefront of policy
  • Promotes greater corporate responsibility on information security issues
  • Facilitates executive-to-executive communications about solutions to threats and emerging trends
  • Conducts research leading to identification and resolution of root causes to information security problems
  • Develops training programs across the gamut of corporate information security issues
  • Provides a coordination point for industry dialogue on self-regulation issues such as market incentives, IT risk management and privacy
  • Develops organizationally viable models for integration and adoption of security best practices
  • Educates senior management and boards, linking information security throughout the enterprise operations
  • Conducts timely seminars on emerging security issues
  • Provides early warning of emerging security threats and in-depth reports on vulnerabilities and threats
    •