Once a year testing does not provide users with adequate insight into a product's capabilities. SUM provides information security professionals with timely data on the effectiveness of a product they may be evaluating for purchase or are currently managing. In addition, NSS Labs reports the associated throughput of a given security effectiveness score, acknowledging the balance between security and performance.
A new rating system is also being formalized with SUM by which the coveted NSS Labs Gold and Approved awards can be achieved after successful certification and one quarter of SUM testing. Gold will be awarded for accuracy above 95%, Approved above 70% and Tested for all other results.
NSS Labs is continuing its tradition of comprehensive, independent testing and invites vendors to join in helping raise the bar for security effectiveness of products. Initial testing with several products began in Q4 of 2008 and is continuing to expand in Q1 2009. NSS Labs is the only independent test lab that executes both security and performance testing utilizing live threats according to a standardized, published criteria. This provides readers with a common reference framework for technical product evaluations. The methodology has been reviewed and edited based on feedback from our extensive advisory group, which consists of information security buyers, auditors and vendors.
"As budgets get tighter, enterprises need to make sure their security investments are effective against tomorrow's threats in order to protect their critical assets and comply with regulations," says Rick Moy, President, NSS Labs. "Our mission is to provide them with the incomparable level of empirical data and insight that they've come to expect from NSS Labs." NSS will hold a webinar to explain the program and why it is important etc. on Feb 5 @10am PST. To register, and for more information about NSS Labs' SUM testing program go here: http://nsslabs.com/SUM.
About NSS Labs Founded in 1991, NSS Labs is the globally recognized leader in independent security and performance testing and certification. NSS Labs performs the most comprehensive, high-performance security validation in the industry. Our proven methodologies reflect real-world traffic and usage conditions, helping information security professionals understand how products will work in their environments. NSS is a participating organization in the PCI Security Standards Council and a member of AMTSO. For more information, visit: www.nsslabs.com.