It's 2007 – Do You Know Where You're Cybersecurity is?

One shining example is the failure to create and deploy a suite of effective first responder standards to enable those whose peak performance would be most essential in the case of a new disaster to even communicate effectively with each other. Another is to put in place the necessary technical, procedural and regulatory controls needed to protect sensitive personal information.

I have two consortium clients dedicated to information security, and both have found it necessary to issue statements recently to highlight gaps in our cyber defenses. The first was a terse statement issued on January 18 by PCI Security Standards Council, LLC, an organization formed by the major credit card payment brands to create and administer global security standards up and down the credit card payment chain. The statement was occasioned by news of the latest in an ongoing series of breaches of consumer financial records, in this case involving millions of customer records maintained by retialer Target Corporation.

And then there is a press release issued two days ago by the Cybersecurity Industry Alliance (CSIA), whose top-level membership includes all of the major and anti-virus and other security vendors. It's sober reading.

Full Story