Brussels, 13/03/2008 (Agence Europe) - What is the real value of product security standards? A report by the European Network and Information Security Agency (ENISA) provides an insight into practices in this domain, and formulates a series of recommendations for improving network and information standards in Europe through better use of existing security standards.
ENISA recommends: 1) meticulous checks by companies on their information security management systems and the use of security certification; 2) the use of complementary standards such as the ISO2700 standards series, which represents a simpler solution for companies that want to develop, implement and maintain a comprehensive process guaranteeing information security; 3) the application by all member states of the European agreement on mutual recognition, which allows for recognition between signatory states of certificates awarded by one member state's certification authority, (known as the “Common Criteria Mutual Recognition Arrangement”); 4) enhanced accreditation procedures for those in charge of network security certification. The report is available on: (http: //http://www.enisa.europa.eu/doc/pdf/deliverables/inf_sec_certification_2008.pdf ).
ENISA has also published another report for companies that want to find out about better practices in network security and improve their own systems in the long term. Solutions currently on the market for neutralising cyber-attacks are presented in the form of graphs identifying formulas that are most appropriate to their systems. A common glossary is also available to predict difficulties of understanding linked to the use of the different terms and vocabulary but which define the same elements. The report is available at: (http: //www.enisa.europa.eu/doc/pdf/deliverables/busin_cont_report_200802.pdf). (I.L.)