Information Security Best Practices Development

CMU Provost Mark KamletCMU Provost, Mark Kamlet, announces the publication of the ISAlliance Cyber Security for Small Businesses guide at the National Press Club. The ISAlliance Common Sense Guides are co-developed by ISAlliance  members and  partners.
Ken Silva, CISO VeriSign and Jeffrey Ritter, Waters Edge Consulting 

 

The ISAlliance has also developed contracting language for information security. In 2005, the Introductory Guide to Contracting for Information Security was released. 

Read more about the Model Contracts Project, a special development by the members of the ISAlliance demonstrating private sector leadership in information security.

Best Practices Guides Are Integrated into
National Cyber Strategy

As a reflection of the international nature of cyber security, the Common Sense Guide for Senior Managers received the endorsement of the U.S. India Business Council.  The Organization of American States translated the Common Sense Guide for distribution at its first international conference on cyber-security. Perhaps most significantly, the Common Sense Guide was the only such document to be substantially abstracted and included in President Bush’s draft “Strategy to Secure Cyber Space,” published in August 2002.  


 

 

 

 


  

 

Endorsed by:
US Department of Homeland Security
National Association of Manufacturers
American Bankers Association
The National Federation of Independent Businesses
The National Cyber Security Alliance
Financial Services Coordinating Sector
TechNet
US-India Business Council


This guide helps to catalyze a risk-management based approach to ensuring the survivability and security of critical information assets. The best practices contained in this guide represent the 10 highest priority and most frequently recommended security practices as a place to start for today's operational systems.

The ISAlliance Best Practices guides have been translated into Japanese and the Indonesian National Language. In March 2007, the guides were launched by the Director General of Informatics Application at the Information Security Awareness Day in Jakarta. The ISAlliance sends special thanks to Aidil Chendramata, Teddy Sukardi, Hogan Kusnadi, and J. Maeran Sunarto.

The ISAlliance believes the International connections it fosters are critical to the long-term success of achieving greater information security.

NAM President Engler and DHS Asst. Sec for Cyber Sec & Telecommunications Garcia Cyber Security for Small Businesses was developed as part of a DHS request to extend information security to smaller firms. The National Association of Manufacturers (NAM) co-developed the Small Businesses guide and the ISAlliance program.

Pictured left is NAM President and Former Governor of Michigan, John Engler with DHS Assistant Secretary of Cyber Security & Telecommunications, Greg Garcia at an ISAlliance Board meeting.

Regardless of the size of your organization, cyber attacks can have devastating consequences to your business operations. Obviously, larger firms have more to lose in terms of absolute dollars; however, the narrower profit margins which smaller firms operate make it all the more important that they become pro-active in protecting their information systems.

 

 

 

 

 

 

 

 

Why are home computers popular targets for intruders? because they are easy to break into and intruders want to access information that is stored on hard drives, such as credit card numbers and other financial account information. It's not solely money-related information they're after. Intruders also want your computer resources, meaning hard disk space, fast processors, and Internet connections. Why are intruders paying attention to home computers? because home computers are typically not very secure.  

February 16, 2007 - "Drive−by" Web attack could hit home routers.
If you haven't changed the default password on your home router, do so now. That's what researchers at Symantec and Indiana University are saying, after publishing the results of tests that show how attackers could take over your home router using malicious JavaScript code.

http://www.cs.indiana.edu/pub/techreports/TR641.pdf

Source: http://www.infoworld.com/article/07/02/15/HNdrivebywebattack_1.html

 

 

 

    The Internet Security Alliance provides an email subscription service which enables you to easily subscribe to information that is of interest to you. This service is free and creating your custom subscriber profile is fast and easy! Please click HERE to create your subscriber profile now.