Study: Hold Vendors Liable for Security Breaches

[jpcarr@xxxxxxxxxxxx]

Interesting if this comes about.    What would it mean for Sys Admins who
are responible?   Would they start to view which platform they pick with a
slightly different criteria??   Hmm

John Carr
-----------------------------------------------------------------------
Study: Hold Vendors Liable for Security Breaches

A new report issued Tuesday by the National Academy of Sciences
adds yet another voice to the chorus warning that the nation's
information systems are poorly protected.

http://extreme.ziffdavis.com/cgi-bin10/flo?y=eNsp0DXtkO0FBc0dwT0A7

<SNIP>
The report concludes that much of the blame for the sorry state of security
in corporate and government networks belongs to administrators and CIOs who
fail to implement readily available technologies such as firewalls and
intrusion-detection systems or follow industry best practices.
<SNIP>

In addition to shouldering some of the blame for security breaches, the
authors recommend that vendors develop better security interfaces for their
products to simplify administration and conduct better testing of their
products for security vulnerabilities.



______________________________________________
This message is intended only for the person or entity to which it is
addressed and may contain confidential material.  If you are not the
intended recipient, any use, distribution or other action taken in reliance
on this message is prohibited.  If you received this message in error,
please contact the sender and delete the material from any computer.