Liability of vendors - if and how? --- Vlada. Admittedly this is a complex issue to deal with for all the point you highlighted and more. However, we mentioned the use of a code of practices and the CVSS system is a good first step in this direction. While usrs do have a responsibility for protecting their access to technology, vendors must have some responsibility to the overall security of the process; It cannot be good enough simply to seek to rush to market like "BREAKING News" and seeking profits without providing some reasonable standard of security of the product to the public (hence CVSS is good step). Industry watchdogs also have a role in advocacy and possibly a non-profit organization like "Consumer Reports" who would test products and objectively oppose the "pros" and "Cons" of the various products; same as the Gartner Report on Electronic Content Management (ECM)

Source author: Bennette Thomas thomasb@dominica.gov.dm