GCN Home > 02/15/05 web stories
Cybersecurity group celebrates its first birthday by looking ahead
By William Jackson, GCN Staff
SAN FRANCISCOThe Computer Security Industry Alliance had a busy first year, weighing in on federal anti-spyware legislation, evaluating the Common Criteria evaluation scheme and presenting the president with a cybersecurity to-do list.

"I think we've made tremendous progress in the first year," CSIA executive director Paul Kurtz said. "We have established a beachhead in Washington."

The groups agenda for the coming year includes suggesting reforms to the Common Criteria and continuing education for Congress and the private sector about information security.

CSIA, a CEO-led public policy and advocacy group in Washington for the IT security industry, is celebrating its first birthday this week at the RSA Security Conference. The twin factors that spurred the group's formation last year were the lack of a unified industry voice and a lack of government understanding on IT issues at a time of growing regulation, CSIA officials said.

"There was a shared concern about the total void of awareness of the need for cybersecurity throughout both the federal and the state and local levels," said John McNulty, CEO for Secure Computing Corp. of San Jose, Calif., a founding member of the alliance.

Some progress has been made in fostering awareness, McNulty said. "Without a doubt it has improved," he said. "Without a doubt, it still is not good enough."

"The security industry is a big, horizontal industry," said Tom Noonan, CEO of Internet Security Systems of Atlanta, another founding member. "There had never been any organization focused exclusively on security. [Industry officials] were being called to Washington more and more, to testify before Congress and educate staffers and officials. We were being called upon to present a unified industry face, and we weren't organized to have one."

CSIA was established with 12 corporate members at last year's RSA Conference to provide a corporate voice in security policy debates. It has grown to 16 members. Noonan calls the groups formation its most significant accomplishment, to date.

"Don't underestimate the amount of energy required to organize and fund a group like this," he said.

Among its first efforts was for Kurtz, a former presidential adviser, to help fine-tune anti-spyware legislation.

"The way it was originally written would have been a disaster," requiring continuous user consent for such security features as automatic updating of antivirus signatures, McNulty said. Lawmakers changed the language, to allow for a single consent to enable automatic updates.

More news on related topics: Homeland Security, IT Security