|
© 2003-2009 by Chapin Information Services, Inc. |
The RAC Rating for Internet SecurityMissionTo establish the most comprehensive system of website security scoring.VisionChapin Information Services now offers website owners an analytical report on all aspects of operational security. To that end, CIS staff will examine the website's front-end architecture, followed by an on-site inventory of equipment, systems, documentation, and finally, conduct brief interviews with key personnel about maintenance and contingencies. With that report comes an opportunity to publish the website's RAC Rating. Visitors, clients, insurers, creditors and competitors may all see this as an indication of trust in the website's design and operation. Public ServiceA free archive of RAC Ratings will be available at the info-svc.com website. This is our way of giving back to the Internet community, by alerting users about the relative safety of different websites. Along with each rating there will be a summary of how the website's design could affect the safety of its users. RAC Analysis CompositeThe R.A.C. is a score between zero and ten, where 0.1 represents failure of most measures, and 9.9 is the best known securitization. Scores will exclude 0.0 and 10.0. The R.A.C. is calculated using many tests and factors in categories such as: Auditing, Benevolence, Compliance, Consistency, Planning, and Privacy. The score is valid for 12 months, during which CIS can make revisions considering new bugs, changes, and updates. Free ReportsCIS begins its relationship with each website by publishing, for free, a preliminary score on a scale of up to four points. This is not a complete RAC Rating, but an indication of security in the public and semi-public areas of a website. The free report gives each website owner an up-front idea about whether CIS can best serve the owner by endorsing the existing website or by recommending specific improvements in its final report. This Area is Under Construction |