| Launch
On March 15th 2010 the Jericho Forum launched its Self-Assessment Scheme (SAS), a new tool that will allow vendors and their customers to check the effectiveness of an IT security product in meeting their needs, particularly as more organizations adopt cloud computing. [ Press release ] [ Video news release ] [ 5-minute Q&A ]
Download the Self-Assessment Scheme.
What it does
The scheme provides security vendors with a high-value, free-of-charge tool to assess how well a solution satisfies the requirements mandated in the Jericho Forum Commandments - the eleven principles of good security design established by the forum in 2006.
The scheme applies the Jericho Forum Commandments by asking a series of pointed questions that are geared to exposing a product’s security flaws or loopholes. The answers can be gathered into a self-assessment scorecard which scores the result for each commandment as good, acceptable, or unacceptable.
Declare "Self-Assessed"
Vendors may choose to declare that they that they have "Self-Assessed" by displaying the Jericho Forum's "Self-Assessed" banner on their Web site and marketing materials to indicate they can talk about it with interested clients.
Benefits
The scheme will be valuable to:
1. Security vendors wishing to self-assess their products and architectures and demonstrate their effectiveness as a market differentiator. The Jericho Forum expects that IT security vendors will welcome being able to use this tool as it enables product differentiation and drives further innovation through an objective, independent, low-cost assessment that is unlike many other more formal and costly accreditation processes.
2. User organizations looking to compare IT security products and also incorporate their key SAS requirements into their requests for procurement (RFPs)
3. User organizations wishing to self-assess the security of their system implementations and architectures as well as their readiness for cloud computing
4. IT systems architects and designers looking to validate the security of their architecture designs
Self-policing
The self-policing aspect of the scheme ensures it is low-cost, and as a consequence it relies on the honesty of each self-assessor, who of course also knows that their customers have the same access to the SAS so can raise with them the same probing questions.
For further information or responses to queries, please email us.
|
