Re: Security clauses for contracts

[Adam Shostack <adam () homeport org>]

On Thu, May 23, 2002 at 07:13:51AM -0400, t wrote:
| One only has to ask,  would my company be willing to provide this information
| to anyone?

Because you're competing for my business, and you're already claiming
to have very good security and privacy policies in place.

| The only way is to make compliance to acceptable standards contractually and/or
| of course through regulations.  Other than that don't trust your 3rd parties,
| treat them like any other entity not under your control -give them the least
| they need and monitor.   Also document to cover your butt and if necessary be
| sure both sides are insured for possible damages.  Your risk analysis will
| determine how much of anything is necessary.
| 
| Frederick M Avolio wrote:
| 
| > Contracts between who and whom?
| >
| > And I cannot imagine any Alice being able and willing to do any of this.
| >
| > Ah.... A potential business. If this is important, a trusted 3rd party does
| > this work and makes attestations to both sides.
| >
| > No... Lots of Bobs will want this, but no Alices will provide it.
| >
| > Fred
| > Avolio Consulting, Inc.
| > 16228 Frederick Road, PO Box 609, Lisbon, MD 21765, US
| > +1 410-309-6910 (voice) +1 410-309-6911 (fax)
| > http://www.avolio.com/
| >
| > _______________________________________________
| > firewall-wizards mailing list
| > firewall-wizards () nfr com
| > http://list.nfr.com/mailman/listinfo/firewall-wizards
| 
| _______________________________________________
| firewall-wizards mailing list
| firewall-wizards () nfr com
| http://list.nfr.com/mailman/listinfo/firewall-wizards

-- 
"It is seldom that liberty of any kind is lost all at once."
                                                       -Hume


_______________________________________________
firewall-wizards mailing list
firewall-wizards () nfr com
http://list.nfr.com/mailman/listinfo/firewall-wizards