Finally, an NCSA representative or a representative from an NCSA partner organization will make an onsite visit to evaluate the physical security of the site. So far, NCSA has signed up eight partner organizations, including network consultants and security consultants, and is negotiating with a Big Six accounting firm as well to provide certification services, according to Sam Glesner, senior product manager for the program, based in Carlisle, Penn. Once a site is certified, the Webmaster will receive periodic security updates and new standards with which to comply as new threats are found. The NCSA certification team will perform at least two random spot checks of each site yearly. Web sites will need to ante up for this certification.
Quantity discounts are available.
The NCSA claims its studies show that typical Web users are 3.5 times more likely to provide sensitive data such as credit-card numbers, and 1.8 times as likely to provide the demographic data sought after by marketers, to a site whose security is certified. However, the NCSA has yet to convince the vast Internet community that its certification is comprehensive and valuable. The NCSA plans to promote the benefits of site security certification to end users through advertising and direct mail programs. A comprehensive certification program could have some benefits to Webmasters and corporate IS departments beyond increased end-user confidence. With more stringent attention being given to protecting the confidentiality of personal data, participating in such a program may also serve to demonstrate to customers that your organization takes due care and diligence to protect sensitive information.