Press Releases

Tuesday, September 16, 2003
RSA Security Offers Support for U.S. Postal Inspection Service “Operation: Identity Crisis”
E-security expert calls upon businesses to take a more active role in identity theft prevention

BEDFORD, Mass.— RSA Security Inc. (NASDAQ: RSAS), the most trusted name in e-security®, today offered its support for Operation: Identity Crisis, a new U.S. Postal Inspection Service campaign to help the general public guard themselves against identity theft. In addition, RSA Security, a founding member of The Coalition on Online Identity Theft, has outlined its perspective on the actions individuals and organizations should take in order to prevent identity theft in the online world.

Operation: Identity Crisis focuses heavily on what consumers can do to protect against identity theft in the physical world, and includes such practical tips as paying attention to mail containing personal information, reviewing bank account statements and understanding financial institution policies on personal information. According to RSA Security, Operation: Identity Crisis is an important step towards educating the masses on identity theft. However, additional steps must be taken to prevent identity theft in the online world as well, and the burden of responsibility needs to fall not only on the individual, but also on the organizations that hold personal information for their customers, employees and partners.

“Individuals need to know how easy it is for someone to use their personal information to commit fraud online, and businesses and other organizations need to recognize that holding that personal information is a privilege,” said Art Coviello, president and CEO at RSA Security. “Any organization who manages identities and customer information is vulnerable to identity theft, and needs to be vigilant about protecting that information.” RSA Security offered the following advice for businesses holding personal information:

  • Determine where the sensitive information lies, whether it be in centralized or distributed databases
  • Obtain a true understanding of how, where and when the information is being used to conduct business. Who is it sent to? Under what circumstances? Using what methods?
  • Take steps to ensure that existing systems are tamper-proof. For example, use encryption to protect information that is “at-rest.” Properly authenticate users and monitor them once they’re in the system.
  • Take active steps to communicate identity protection policies to employees and consumers. More and more, people are demanding proof that their personal information is protected, and businesses and other organizations need to reassure them.

“The technology and systems exist for businesses to stem the tide of identity theft,” Coviello said. “Now it’s up to businesses to put it to use.”

The Coalition on Online Identity Theft is a group of leading financial services, information technology and electronic commerce companies working to expand public education, promote new technologies, document and share best-practices. The Coalition will work with Federal and State governments to create an environment that protects consumers and businesses, and enforces criminal penalties against cyber thieves. The coalition, administered by the Information Technology Association of America (ITAA), includes such key influencers as RSA Security, Amazon.com, eBay, Microsoft and Visa U.S.A.

About RSA Security Inc.
With more than 12,000 customers around the globe, RSA Security provides interoperable solutions for establishing online identities, access rights and privileges for people, applications and devices. Built to work seamlessly and transparently in complex environments, the company’s comprehensive portfolio of identity and access management solutions - including authentication, Web access management and developer solutions - is designed to allow customers to confidently exploit new technologies for competitive advantage. RSA Security’s strong reputation is built on its history of ingenuity and leadership, proven technologies and long-standing relationships with more than 1,000 technology partners. For more information, please visit www.rsasecurity.com.