Similiar to those folks who try to offer security certification testing but 
really don't have a body of standards to adhere by.  :)

At 11:21 AM 3/9/01 -0500, Jose Nazario wrote:
On Fri, 9 Mar 2001, mht wrote:

 > On December 7, 2000, a bill was introduced to the British House of
 > Lords that proposes that all security consultants receive training and
 > be licensed by the government before performing work for outside
 > entities.

those crazy brits. they're even more legislatively happy go crazy than we
are here in america! </rant about draconian UK crap>

 > Perhaps such standards are better left under direct public control,
 > similar to how in America we rely on Underwriter's Labs for product
 > safety and certification testing. Can a similar entity suffice for
 > information security?

please see http://www.counterpane.com/crypto-gram-0101.html#1 for
schneier's thoughts on the matter. well stated, i think.

____________________________
jose nazario                                                 [EMAIL PROTECTED]
                     PGP: 89 B0 81 DA 5B FD 7E 00  99 C3 B2 CD 48 A0 07 80
                                       PGP key ID 0xFD37F4E5 (pgp.mit.edu)

-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]

Reply via email to