Computer Security Day on 30 November Urges Organizations to

 Protect Their Information and Promote Security Awareness

Rolling Meadows, IL, USA (18 October 2005)—An organization’s information security is the responsibility of all employees, regardless of the position they hold. To help people recognize their responsibilities and promote stronger security, the Information Systems Audit and Control Association (ISACA) is co-sponsoring Computer Security Day on

30 November.

Computer Security Day was started in 1988 by the Association for Computer Security Day to help raise awareness of computer-related security issues and to remind people how important it is to protect their computers and information.

The Association for Computer Security Day suggests more than 50 ways for companies to recognize Computer Security Day, including:

• Display computer security posters (available at www.computersecurityday.org).

• Offer a training session to provide all computer users with a basic understanding of computer security.

• Encourage password changes.

• Check for computer viruses.

• Back up data (after ensuring that the information is virus-free).

• Delete unnecessary files.

• Publicize the existing computer security policy or issue a new and improved computer security policy.

• Declare an amnesty day for computer security violators who wish to reform.

• Install and inspect power surge protection as appropriate.

• Install fire/smoke detection and suppression equipment in areas with computers.

To further assist organizations in strengthening their information security, ISACA recently released Security Awareness: Best Practices to Secure Your Enterprise (available at www.isaca.org/bookstore). The publication features 18 steps for creating a security awareness program and offers a self-assessment guide for evaluating the program.

“Information is among a business’s greatest assets,” said Everett Johnson, CPA, international president of ISACA. “It is crucial to make information security a high priority and to make employees aware of the important role they play in strengthening the organization’s security.”

About ISACA

With more than 47,000 members in more than 140 countries, the Information Systems Audit and Control Association^® (ISACA^®) (www.isaca.org) is a recognized worldwide leader in IT governance, control, security and assurance. Founded in 1969, ISACA sponsors international conferences, publishes the Information Systems Control Journal^®, develops international information systems auditing and control standards, and administers the globally respected Certified Information Systems Auditor™ (CISA^®) designation, earned by more than 40,000 professionals since inception, and the Certified Information Security Manager^® (CISM^®) designation, a groundbreaking credential earned by 5,200 professionals in its first three years.

About the Association for Computer Security Day

The Association for Computer Security Day (A4CSD) (www.computersecurityday.org) coordinates the annual observance of Computer Security Day worldwide.  Supported by sponsors and partners, the A4CSD produces and distributes posters and provides information that helps each participant focus attention on computer security at their own location. Computer Security Day began in 1988 and has official participants in more than 50 countries this year. Sponsors are Security Awareness Inc., ISACA, Symantec Inc., ACM/SIGSAC,

ITAA, and ISSA.

Media Contacts

Kristen Bertholomey, +1.847.590.7455, kbertholomey@isaca.org

Deborah Vohasek, +1.847.590.7466, dvohasek@isaca.org

ISACA

3701 Algonquin Road, Suite 1010

Rolling Meadows, IL 60008

USA