1. What are the CT Forum Baseline Requirements (BR) and how did they come about?
The widespread use of the Internet for online transactions, the need to secure them, the proliferation of Anti-virus software providers, and the transparency and other criteria in the technologies used to detect malware have created a critical need for data accuracy. Anti-virus software vendors have worked to develop uniform or complex standards for blocking viruses and protecting systems. The requirements include what stages the malware went through and why it was quarantined, and requirements for increased transparency, responsibility, privacy, confidentiality, and delegation of authority.
2. Why are the Baseline Requirements important?
Baseline Requirements are important to both Anti-virus software providers and consumers. Anti-virus software vendors will have a clear understanding of the standards they must adhere to when providing anti-virus software. In turn, auditors will use the criteria to gauge whether the CT meets the industry's minimum expectations. A CT with an audit that shows it is compliant with the Core Requirements will have less risk of being rejected by leading anti-virus vendors. Consumers will be assured of a certain level of security that detects or blocks viruses offered by anti-virus providers that adopt the Cyber Transparency Core Requirements. The Core Requirements will lead to more transparent information and more frequent use of standards to provide confidence in accessing accurate information that is lacking in cyber security.
3. Does the publication of Basic Requirements mean that all Anti-virus providers have the same security standards?
The Basic Requirements provide a minimum standard for Anti-virus providers regarding the process of preventing or detecting viruses. However, Anti-virus providers are encouraged to go beyond basic standards to provide strict authentication practices and higher standards that provide stronger security for organizations and users. In summary, users and consumers who share and transact on the Internet will have better protection and visibility into the trust level of the websites they visit.