Chapter 15 - Minicase 2

Managing Security

In preparation for answering the questions, review the Internet Security Alliance (ISA) web site.

1. Why does the Internet Security Alliance (ISA) include both private and public members?

   To provide information sharing and leadership betwixt both public organizations and the industry, the ISA has joined a number of trade groups, University groups, industry groups, and private parties. By including such a large cross-section, ISA believes it will achieve greater information sharing and heightened awareness of the various security issues.

2. What is the mission of the Alliance?

   Information sharing and representation of its membership are the goals of ISA.

3. Why is it beneficial to prioritize issues?

   By prioritizing the issues, ISA members can work toward solutions of the most important problems first. Prioritization also allows ISA members to develop solutions and recommendations for most pressing problems first.

4. How would you justify the existence of the Alliance? Who should pay its costs?

   Because the practices and recommendations encompass policy, people, processes, and technology that represent a true cross-section of the industry, Alliance information takes no added credibility that makes it more valuable to all. The very nature of its diverse membership points to the substance behind its reports. The costs should be born by private and public groups, in combination.