ISSX Internet Security Systems

Kurtz: 'You Can't Manage What You Can't Measure' ARLINGTON, Va., April 24 /PRNewswire/ -- The Cyber Security Industry Alliance (CSIA) today strongly urged companies to complete a joint U.S. Department of Justice - Department of Homeland Security survey seeking to gauge the costs of cyber incidents. The survey's questions cover a range of issues, including companies' top concerns about information security, the types of computer security incidents and cybercrime they have experienced and defense mechanisms. "Everyone knows that cybercrime and other computer incidents are a growing problem," said CSIA Executive Director Paul Kurtz. "But no one really knows how large, how fast it's growing, or where the problems are concentrated. And you can't manage what you can't measure. The more we know about the extent of cybercrime, the better we'll all be able to combat it." The survey is the first comprehensive examination of a wide range of industry sectors. The initial wave of questionnaires was distributed in February; full distribution begins today. Responses, collected by the Rand Corporation, will be held strictly confidential, by law. "It's hard to overemphasize how important it is that as many companies as possible participate in this survey," Kurtz said. "Current estimates of the cost of cybercrime and other incidents are all over the map, but this is much more than just an academic exercise. For example, the cost estimates for the MyDoom virus alone range from $250 million to $40 billion. Clarity on the types of incidents, costs and potential defense mechanisms will be of immense value to both the private sector and the federal government. Such data will enable both to more effectively allocate resources to defend systems and combat cybercriminals. Imagine if law enforcement agencies had to confront crimes like assault or burglary without any reliable data on where they are most likely to occur, and when, and by whom. The results of the DOJ/DHS survey will help the federal government determine where to put its resources to get the best possible results in securing the information infrastructure." More information is available at http://www.ojp.usdoj.gov/bjs/pub/press/ncsspr.htm and http://www.ojp.usdoj.gov/bjs/survey/ncss/ncss.htm. About the Cyber Security Industry Alliance The Cyber Security Industry Alliance is the only advocacy group dedicated exclusively to ensuring the privacy, reliability and integrity of information systems through public policy, technology, education and awareness. Led by CEOs from the world's top security providers, CSIA believes a comprehensive approach to information system security is vital to the stability of the global economy. Visit our web site at http://www.csialliance.org/. Members of the CSIA include Application Security, Inc.; CA, Inc. (NYSE: CA); Citadel Security Software Inc. (NASDAQ:CDSS); Citrix Systems, Inc. (NASDAQ:CTXS); Entrust, Inc. (NASDAQ:ENTU); Fortinet, Inc.; Internet Security Systems Inc. (NASDAQ:ISSX); iPass Inc. (NASDAQ:IPAS); Juniper Networks, Inc. (NASDAQ:JNPR); McAfee, Inc. (NYSE:MFE); Mirage Networks; PGP Corporation; Qualys, Inc.; RSA Security Inc. (NASDAQ:RSAS); Secure Computing Corporation (NASDAQ:SCUR); Surety, Inc.; SurfControl Plc (LONDON: SRF) ; Symantec Corporation (NASDAQ:SYMC); TechGuard Security, LLC; Visa International and Vontu, Inc. DATASOURCE: Cyber Security Industry Alliance CONTACT: Scot Montrey, Communications Director of CSIA, +1-703-894-3022, Web site: http://www.csialliance.org/ http://www.ojp.usdoj.gov/bjs/pub/press/ncsspr.htm http://www.ojp.usdoj.gov/bjs/survey/ncss/ncss.htm

Copyright