A big part of that commitment means creating, implementing and enforcing a robust information security plan. Employees must be fully educated on information security best practices, and a truly comprehensive approach will reach out to an organization s vendors and suppliers too. Everyone must practice good cyber-hygiene. Broadband access in the home can leave always-on computers more vulnerable to threats. Home users must have proper firewall and virus protection, and be aware that they could be the unknowing accomplices to cyber crime.
Information sharing is another key challenge .
As I testified before Senator John Kyl s Subcommittee in March, companies are understandably reluctant to share sensitive proprietary information about prevention practices, virus related losses, intrusions, and actual crimes with either government agencies or competitors. Few companies whether they are IT vendors or users are interested in being perceived by as either vulnerable to attacks or the active agents of law enforcement. Agencies, meanwhile, are often viewed as demanding this type of information from the private sector but giving little back in return. Information sharing cannot be a one-way street. Organizations will be more willing to work together once these protections are in place.