The Internet has not only become indispensable to the way we do business it has become indispensable in our everyday lives. From a business perspective the Internet empowers organizations to conduct e-commerce, provide better customer service, collaborate with partners, reduce communications costs while increasing communication capabilities, and access information more quickly than ever before.
In the rush to increase the benefits of the Internet, significant risks have been overlooked. For example, the engineering practices and technology used by many system providers do not produce systems that are immune to attack. Most network and system operators do not have access to the resources and technical expertise to defend attacks and minimize potential damage while continuing to insure the undisturbed flow of information. Further, security practices are unorganized, underdeveloped and poorly disseminated providing for low adoption rates. Current policies and laws related to cyberspace are also likely to add to the barriers because they are drastically behind the pace of technology.
Due to the events of September 11, 2001, cyber-security has vaulted into the national spotlight, illustrating the need for business and government communities to determine a course of action to protect U.S. critical infrastructures from potential attacks. Just as we have taken measures to protect our physical structures from future terrorist attacks, continued steps need to be taken to protect our critical information systems.
Our dependence on the Internet and ever increasing threat of attack creates a true challenge for today's policymakers. Policymakers must determine the roles of both government and industry and contemplate how to use available assets to best protect the Internet. This is a challenging assignment and one that calls for cooperation and trust.
The role of the private industry is simple. It must take the lead in providing solutions to the complicated issues surrounding Cyber Security. Similar to the Y2K crisis, only when global corporate boardrooms recognize their fiduciary responsibility and allocate proper resources to provide secure systems will the issue of Cyber Security be addressed adequately.
To address the need for greater Cyber Security within our business community, the Electronic Industries Alliance formed the Internet Security Alliance, a collaborative effort with Carnegie Mellon University's CERT/CC and a cross-sector of private international companies including NASDAQ, Mellon Financial, TRW and AIG. The Alliance is an industry-led, global, cross-sector network focused on advancing the security and survivability of the Internet with sound information practices, policies and technologies.
For more information about the Internet Security Alliance, please visit www.isalliance.org or contact Larry Clinton.
