[LINK] RFC: Easier Security for SMEs and Consumers

[Roger Clarke]

I'd greatly appreciate constructively negative feedback in relation 
to a paper I'll be presenting for the first time at a Cybersecurity 
Law event in Sydney in November.


            Why Isn't Security Easier for SMEs and Consumers?
               http://www.rogerclarke.com/EC/SSACS-13.html

There are many facets of information and IT security, and threats and 
vulnerabilities change continually.  Safeguards exist that provide at 
least a reasonable degree of protection.  So, with so much 
accumulated knowledge around, why are SMEs and consumers hung out to 
dry?  Why aren't consumer devices delivered with convenient security 
facilities?


The crux of the paper is:

-   minimum security safeguards for organisations
     http://www.rogerclarke.com/EC/SSACS-13.html#Exh1

-   baseline security features for consumer devices
     http://www.rogerclarke.com/EC/SSACS-13.html#App2
-   additional features for medium-level security
     http://www.rogerclarke.com/EC/SSACS-13.html#App3
-   security features omitted from the first two sets
     http://www.rogerclarke.com/EC/SSACS-13.html#App4


-- 
Roger Clarke                                 http://www.rogerclarke.com/
			            
Xamax Consultancy Pty Ltd      78 Sidaway St, Chapman ACT 2611 AUSTRALIA
Tel: +61 2 6288 6916                        http://about.me/roger.clarke
mailto:Roger.Clarke at xamax.com.au                http://www.xamax.com.au/

Visiting Professor in the Faculty of Law            University of N.S.W.
Visiting Professor in Computer Science    Australian National University