Leading cyber security firms form non-profit group for public policy advocacy, education

The Cyber Security Industry Alliance (CSIA) was launched today at the RSA Conference 2004 by a group of 12 innovative security software, hardware and service vendors.

The CSIA is a non-profit corporate-membership organisation, whose mission is to improve cyber security through public policy initiatives, public sector partnerships, corporate outreach, academic programs, alignment behind emerging industry technology standards and public education.

The CSIA also announced the appointment of Paul Kurtz as its executive director. Most recently, Kurtz served as special assistant to the President and senior director for Critical Infrastructure Protection on the White House`s Homeland Security Council (HSC). He was responsible for developing the White House`s strategy and policy for protecting the nation`s critical infrastructure.

Prior to joining the HSC in 2003, Kurtz served on the White House`s National Security Council (NSC) as senior director for National Security of the Office of Cyberspace Security. He was also a member of the President`s Critical Infrastructure Protection Board, where he developed the President`s National Strategy to Secure Cyberspace.

"Cyber security now serves as the linchpin of success in meeting both our homeland and economic security objectives," said Kurtz. "Security will enable the IT revolution to reach its full potential. As a result, a unified industry voice is needed to assist consumers, enterprises and governments to meet the security challenges of today`s digital world. The CSIA looks forward to working in partnership with key stakeholders in the public and private sector to address the various implications associated with securing cyberspace."

Comprised exclusively of information technology security companies, the CSIA is uniquely positioned to benefit consumers, governments and a cross-section of industries by leveraging its members` shared expertise and resources.

Founding members include BindView Corp, Check Point Software Technologies Ltd, Computer Associates International, Inc, Entrust, Inc, Internet Security Systems Inc, NetScreen Technologies, Inc, Network Associates, Inc, PGP Corporation, Qualys, Inc, RSA Security Inc, Secure Computing Corporation and Symantec Corporation. The CSIA`s board of directors is composed of the CEOs of these companies.

The CSIA will take up the challenge laid down by US Secretary of Homeland Security Tom Ridge at the National Cyber Security Summit held on 3 December 2003 in Santa Clara, California, where Ridge noted that the federal government cannot succeed on its own.

"Eighty-five percent of our nation`s critical infrastructure, including the cyber network that controls it, is owned and operated by the private sector. As such, we not only need businesses to be active partners with us in securing these vital assets, we need businesses...to lead the way."

The CSIA will carry out its work via focused member-driven committees: Public Policy, Education and Alliances, Awareness, and Standards. CSIA members are working to finalise their initial agendas, which will likely include initiatives in the following areas:

Trek to the summit

00Days

:

00Hrs

:

00Min

:

00Sec

* Coordinating with the Department of Homeland Security to improve information sharing between business and government on cyber-threats;

* Improving corporate governance of information security;

* Improving federal procurement practices and guidelines;

* Identifying gaps in cyber security R&D;

* Collaborating with US and international standards development organizations to support emerging technology standards and specifications that will serve to enhance cyber security;

* Supporting existing campaigns to improve awareness of cyber security, including the National Cyber Security Alliance;

* Supporting academic programs such as the Centres of Academic Excellence in Information Assurance Education and building workforce development programmes;

* Pursuing US Senate ratification of the Council of Europe`s Convention on Cyber-Crime.

The CSIA has two levels of membership, Charter and Principal, which are limited to companies with a substantial focus on providing cyber security solutions. More information about membership can be found at www.csialliance.org.