New Industry Initiatives in CyberSecurity

1. New Industry Initiatives in CyberSecurity Southeast Europe Cybersecurity Conference Sofia, Bulgaria 8-9 September 2003 Howard A. Schmidt Vice President, Chief of Security eBay Inc.

2. Tech Net CEO Task Force on CyberSecurity • Association of CEOs from High Tech Companies • Seattle, Washington • Silicon Valley, California • Portland, Oregon • Austin, Texas • Met with White House January 2003 • Discuss National CyberSecurity Strategy • Announce creation of CEO CyberSecurity Task force • Best practice guide for CEOs • CEO level governance of CyberSecurity

3. Business Roundtable (CRT)Security Roundtable • Formed 1972 • Look at government policies around business • Work with US Government on Business needs • Formed Security Roundtable • Led by major corporation CEOs • Set standards for Security governance and board review • http://www.brt.org

4. Online ID Theft Coalition • ID Theft fastest growing computer crime • Majority of ID Theft occurs OFFLINE • Discarded personal information • Skimmers used by workers given credit cards in business • Online ID Theft online small but growing crime • Information Technology Association of American (ITAA) Also President of World Information Technology Society Association (WITSA) serves as Executive Director

5. Online ID Theft Coalition • Expand public education campaigns against online identity theft to protect consumers and ensure that they can have confidence in Internet commerce • Help promote technology and self-help approaches for preventing and dealing with online identity theft • Document and share non-personal information about emerging online fraudulent activity to stay ahead of criminals and new forms of online fraud • Work with government to cultivate an environment that protects consumers and businesses, and ensures effective enforcement of criminal penalties against cyber thieves

6. Global CSO Council • Group of experienced security executives • “Think Tank” around global Cybersecurity • Carnegie Mellon University Executive Director (CERT/CC) • Supported by various CEO groups and government agencies

7. Global CSO Council • The Global Council of CSOs has five primary initiatives: • Bring together CSOs/s to address online security challenges in an ever-changing environment, with a focus on business issues rather than technological issues; • Define the proper role, background, and reporting arrangements for CSOs within business organizations; • Define the role of the CSO in implementing The National Strategy to Secure Cyberspace; • Determine the appropriate times and means for CSOs to communicate with government on cyber security issues; and • Communicate candidly with software/hardware vendors on a regular basis, defining security related business needs and offer suggestions on how technology can be used to minimize risks.

8. Global CSO Council • Charter Members of Global CSO Council • Bill Boni, Motorola • Vint Cerf, MCI • Scott Charney,Microsoft • Dave Cullinane, Washington Mutual Bank • Mary Ann Davidson, Oracle • Dennis Devlin, The Thomson Corporation • Whit Diffie, Sun Microsystems • Steve Katz, former Citigroup • Rhonda McLean, Bank of America • Will Pelgrin, The State of New York • Howard A. Schmidt, of eBay

9. Thank You Howard A. Schmidt howard@cyber-security.us 408-376-6282