Mark Hosey

West Central Scotland

R&D

(Continued from last post)

I believe the only way we can ensure our security is to make the suppliers of internet services and software liable for security breaches which occur as a result of insecurities inherent in any products they supply. European standards are urgently required to force ISPs to live up to a duty of care they owe their customers, to protect them from criminal and malicious activity perpetrated via their servers. I believe a range of security standards must be applied to corporate web sites with the aim of ensuring their immunity to perceived threats and known methods of attack. I also believe European software standards, proscribing known bad practice in the creation of software products, must be set aiming to make them secure from and immune to criminal and malicious activity.
In all instances products and services should be obliged to undergo some minimum level of measurable and verifiable product testing, formal or otherwise, to ensure they meet appropriate standards.