[discuss] Who is responsible for security

Fri Jan 17 20:04:53 UTC 2014

Hi Roland,
At 10:16 17-01-2014, Roland Perry wrote:
>And the measures that ISPs could take are not restricted to 
>technical ones. ISPs tend to be over-represented on lists like this 
>by their technical department.

I don't think that there are ISPs [1] represented on this mailing list.

>There's a lot ISPs could do by refraining to provide service to 
>organisations of doubtful repute (that's the sales department), and 
>co-operating more with law enforcement when it comes to identifying 
>bad actors (that's the legal department).

A company usually does not decline business from customers who will 
pay for it.  Note that law enforcement also covers spy agencies.  An 
ISP does not have much incentive not to collaborate with the 
government, e.g. law enforcement, unless doing what is being asked 
will cause a lost of revenue.

I was reading a European Union committee report which mentioned the following:

   "Points out that both telecom companies and the EU and national telecom
    regulators have clearly neglected the IT security of their users and
    clients;"

Regards,
S. Moonesamy

1. Internet Service Providers 