• Advertise
  • Subscribe
  • Forums
  • Buyer's Guide
  • Contact Us
  • Connect on LinkedIn
    1. Cybersecurity
    2. Information Security

    ASIS, ISSA and ISACA Unite to Address Enterprise Security Risks

    Feb. 18, 2005
    Association alliance responds to continued convergence of security risks

    Three leading security associations today announced formation of an alliance to address the management of risks and emerging regulations requiring a more thorough, enterprise-wide approach to security.

    The alliance of Information Systems Security Association (ISSA), ASIS International (ASIS) and the Information Systems Audit and Control Association (ISACA) brings together more than 80,000 global security professionals with a broad base of security backgrounds and skills to address these issues.

    The need for this global alliance is predicated on the significant increase and complexity of security-related risks to international commerce from terrorism, cyber attacks, Internet viruses, theft, fraud, extortion and other threats that require corporations to develop a more comprehensive approach to protect the enterprise.

    "In an era of increasingly complex global security risks to people and businesses, it is encouraging to see the three most prominent international security organizations align to provide holistic solutions for the security professionals charged with the protection of people, property and information, and the business enterprises they serve," said David Cullinane, President of the ISSA.

    A critical step in the development of this integrated approach is to ensure all functions within the enterprise work together to identify and mitigate risks, and to effectively manage security-related incidents when they occur in order to reduce their impact on people, profitability and property.

    The objectives of the alliance are:

  • Developing risk models that more fully qualify and quantify enterprise-wide security risks and potential impacts to the business.
  • Raising awareness to executive management regarding the nature of existing and emerging security threats, and best practices to mitigate those threats through the convergence of security organizations, processes and approaches.
  • Promoting a common security management voice to legislators and government agencies and providing them with information regarding best security practices.
  • Continuing to define the qualification, certification and training requirements for the Chief Security Officer (CSO)/Chief Information Security Officer (CISO) role and other security-related positions.

    • The alliance will also advance its objectives through research, executive seminars and other educational offerings to benefit security and other business executives.