From June 1st-15th 2007, ISSA has been asking our members this very question, through an on-line member poll.
One needs to look no further then their local newspaper to see stories that show the negative consequences of lost or stolen laptops, or any mobile storage device. From damaged reputation, to financial losses, the costs can be steep.
The results of this poll, though not scientific, give each member a perspective on how their preparedness compares to others. Our hope is that this can be used by information security professionals and their non-IT peers to bring policy, cooperation and budget to this important area of information security.
“ISSA members: here is what you are doing to prepare for the inevitable lost laptop?”
Thank you to The Cyber Angel for sponsoring this member poll.
By Thomas Dawkins, Sr. Marketing Manager at Microsoft with over 25 years of IT experience, is responsible for ISSA’s strategic partnership with Microsoft. If you have ideas about how we can partner together, contact Thomas at tdawkins@microsoft.com.
Thank you for taking the time to complete the recent ISSA/Microsoft survey – over 800 ISSA members responded. Microsoft’s objective was to gather information on your perception of our security efforts and identify what we could do better to support you – security professionals, ISSA members, and consumers of our products. As such, we are very pleased with the role diversity in the survey demographics, which is similar to ISSA’s overall membership demographics. With this level of the diversity, we are able to better understand what is important to you in your role.
At Microsoft, our approach to security spans both technical and social aspects. To us, security is helping to ensure that information and data are safe and confidential. We are investing considerable resources to increase the security of our products and to provide implementation guides and training based on industry best practices. We are also forging a leadership position towards minimizing the impact of malicious computer use. Our partnership with ISSA is instrumental to our understanding the needs of the security industry and supporting you, the security professionals.
As for your perception of Microsoft, we see that you value our efforts and would like to see Microsoft provide additional security training and free security seminars. We will be working with the ISSA International Board and the ISSA Membership Management team on these activities. Expect a new ISSA survey to help ISSA management and Microsoft prioritize the development and delivery of training you want. Also expect an announcement in July about two new security series Microsoft plans to make available exclusively to ISSA members.
We learned from the survey question,“How would you rate Microsoft’s ability to build and deliver acceptable security products beyond firewalls and antispyware?” that you recognize and support the progress Microsoft is making. Based on additional comments provided by many of you, Microsoft should continue to use and improve on our engineering efforts – Security Development Lifecycle – and focus on how Microsoft can better support you in managing the evolving threat landscape. We were happy to see that a number of you use the Microsoft website to access security information on our products and the security bulletins we release on a regular basis. In the comments section, you told us it is difficult to get the necessary security information in a timely manner – You can expect Microsoft to take action on this over the next year for you.
With our ISSA/Microsoft partnership, you have a voice and we are listening.