Contact:
Robin Rothman, Direct Computer Resources. 720.945.1313;
rrothman@datavantage.com
Marjorie Morgan, Internet Security Alliance. 703.907.7799;
mmorgan@isalliance.org
FOR IMMEDIATE RELEASE
BRUSSELS, BELGIUM (October 11, 2010) — Direct Computer Resources, Inc. (DCR) president Joseph Buonomo led a delegation from the Internet Security Alliance (ISA) to Brussels, Belgium, this week in response to a request from the European Commission (EC) in their efforts to create a public/private alliance to create a sustainable system of worldwide cyber security and information protection. Mr. Buonomo, an ISA Board Member, was joined by ISA president Larry Clinton.
DCR was among several private sector corporations who contributed to the ISA’s recently published “Financial Management of Cyber Risk — An Implementation Framework for CFOs,” which Mr. Buonomo co-chaired. The EC referenced the publication several times in developing its questionnaire for the European Public-Private Partnership for Resiliency (EP3R) and more specifically the ISA’s cyber security positions on its social contract concept between government and the private sector, enterprise education, government incentives and focusing on “what” must be done in order to implement effective cyber security practices as opposed to “how” to do it.
The weeklong sessions included meetings with Andrea Servida, Deputy Head of Unit A3, Internet, Network and Information Security and Joern-Uwe Heyder, Second National Expert as well as discussions with trade associations and European-based private sector corporations.
Both ISA and DCR have been meeting and working with the EC for the past year and are pleased to see that they have adopted some of its proposals about the need for government to create market incentives for cyber security in the document they are due to release next month.
Buonomo stated that “Multi-country efforts designed to promote Cyber Security and Information Protection provide the synergy to help governments keep their critical data secure even across international borders. Our conference in Belgium is one among many we plan to participate in during the coming years.”
Mr. Clinton added that “Central to the ISA Social Contract paradigm is that it is in every government’s interest to creatively use market incentives to promote better security among the private sector. Since the private sector owns and operates the vast majority of the networks that provide the access to the Internet and other electronic communications, it is critical for governments to work with the private sector productively as all parties rely on each other for defense, commerce and social service functions.”
According to the ISA documents, up to 90% of cyber breaches can be successfully mitigated simply by implementing standards, practices and technologies which have already been proven to work.
DCR's DataVantage Global software product is an example of one such technology: a single, scalable, multi-tier enterprise-wide solution that obfuscates private and confidential information. The patented software, which has recently received Safety Act Designation from the Department of Homeland Security as Qualified Anti-Terrorism Technology, helps government agencies and private sector companies in all industries comply with regulatory standards as well as internal policies concerning shared data.
Direct Computer Resources, Inc. has served hundreds of Fortune 500 companies internationally for more than 30 years. During the late 1970’s, DCR’s principals pioneered the application development testing and data management market with its DataVantage for IMS product, later encompassing the entire z/OS spectrum including DB2 and VSAM. With DataVantage Global, DCR has become a market leader in cyber security for industry and government.
The Internet Security Alliance (ISA) is a non-profit collaboration with Carnegie Mellon University's CyLab. ISAlliance was created to provide a forum for thought leadership and affirmative action on information security issues.
The ISA is a unique international and “cross-sectoral” trade association representing corporate interests from the Defense & Aerospace, Banking & Financial, Food Service, Insurance, Entertainment, Information Technology, Telecommunications and Manufacturing industries with 40 member companies on four continents.
Based in Brussels, the European Commission (formally the Commission of the European Communities) acts as an executive body for the European Union, responsible for proposing legislation, implementing decisions, upholding the Union’s treaties and the general day-to-day running of the Union.
During 2009, the EC has unfolded its Critical Information Infrastructure Protection (CIIP) for protecting Europe from large scale cyber attacks and disruptions and enhancing preparedness, security and resilience which focuses on prevention, preparedness and awareness and defines a plan for immediate actions to strengthen the security and resilience of CIIs. On 30 September 2010 the EC adopted a proposal to modernize the European Network and Information Security Agency (ENISA) and will release it during November 2010. You may find the details here. The planned activities complement the European Programme for Critical Infrastructure Protection (EPCIP), which is a separate but related Commission activity. A key element of EPCIP is the Council Directive on the identification and designation of European Critical Infrastructures, which explicitly states that the ICT sector is a part of critical infrastructures which will need to be specifically addressed.
# # #