Feeds

Demand for safety kitemark on software stepped up

MPs want new standard plus web security schooling

The Essential Guide to IT Transformation

The government and industry ought to do more to promote online safety, according to an influential panel of MPs.

Politicos on the Science and Technology Select Committee called for the expansion of Get Safe Online and similar efforts, and for more prolonged awareness campaigns geared towards dispelling fears and encouraging common sense.

The committee wants a single place where punters can get basic security advice, stripped of confusing technical jargon, plus television campaigns.

It also wants public services to be convenient and secure by design, rather than focused on cost-savings, because the government's "digital by default" policy will require citizens to access services, including benefit payments, online.

Finally, and most controversially, MPs want to see "safety standards on software sold within the EU, similar to those imposed on vehicle manufacturers". Industry self-regulation is the preferred route towards achieving that goal but the panel said that if that fails then legislation ought to be considered.

In a statement, Andrew Miller MP, chairman of the committee, said:

Despite the increasing use of malware, the internet is still a reasonably safe place to go about one’s business, provided users take a few sensible precautions. Government departments need to realise that better public information about computer safety could save huge numbers of people the hassle of having their personal details stolen.

Knowledge is the best defence against fear, so the Government should focus on raising awareness of how to stay safe online - rather than scaring people about the dangers of cyber crime.

The group's recommendations follow a series of hearings on malware and cybercrime that resulted in the publication of a formal report last week.

Graham Cluley, senior technology consultant at Sophos, welcomed the report while emphasising the need for better cybercrime reporting mechanisms to properly scope the extent of the problem.

"We strongly believe that greater awareness and education regarding internet threats is a key element in fighting cyber crime, and it's encouraging to see the committee's report not only back this idea, but also to recommend that messages need to be customised carefully for the different generations of people using the net," he said.

"Simple, easy-to-understand language is by far the best way to help computer users understand how to protect themselves online, and we are keen supporters of the government-backed GetSafeOnline website.

"We need an independent way of measuring the cyber-threat that's out there.  Much of the data used by the report is supplied by security vendors, who - one can argue - could have a vested interest in hyping up the internet threat.  To avoid such accusations, proper systems must be put in place to make it easy for citizens to report internet crimes and malware attacks," he added, while suggesting the first place to start would be teaching cops how cyber-criminals work. ®

Build a business case: developing custom apps

More from The Register

next story
14 antivirus apps found to have security problems
Vendors just don't care, says researcher, after finding basic boo-boos in security software
'Things' on the Internet-of-things have 25 vulnerabilities apiece
Leaking sprinklers, overheated thermostats and picked locks all online
Only '3% of web servers in top corps' fully fixed after Heartbleed snafu
Just slapping a patched OpenSSL on a machine ain't going to cut it, we're told
How long is too long to wait for a security fix?
Synology finally patches OpenSSL bugs in Trevor's NAS
Secure microkernel that uses maths to be 'bug free' goes open source
Hacker-repelling, drone-protecting code will soon be yours to tweak as you see fit
Israel's Iron Dome missile tech stolen by Chinese hackers
Corporate raiders Comment Crew fingered for attacks
Roll out the welcome mat to hackers and crackers
Security chap pens guide to bug bounty programs that won't fail like Yahoo!'s
HIDDEN packet sniffer spy tech in MILLIONS of iPhones, iPads – expert
Don't panic though – Apple's backdoor is not wide open to all, guru tells us
Researcher sat on critical IE bugs for THREE YEARS
VUPEN waited for Pwn2Own cash while IE's sandbox leaked
prev story

Whitepapers

Implementing global e-invoicing with guaranteed legal certainty
Explaining the role local tax compliance plays in successful supply chain management and e-business and how leading global brands are addressing this.
The Essential Guide to IT Transformation
ServiceNow discusses three IT transformations that can help CIO's automate IT services to transform IT and the enterprise.
Consolidation: The Foundation for IT Business Transformation
In this whitepaper learn how effective consolidation of IT and business resources can enable multiple, meaningful business benefits.
How modern custom applications can spur business growth
Learn how to create, deploy and manage custom applications without consuming or expanding the need for scarce, expensive IT resources.
Build a business case: developing custom apps
Learn how to maximize the value of custom applications by accelerating and simplifying their development.