A volunteer movement to help Jamaica and the wider Caribbean identify and mitigate security weaknesses in public computer systems before attackers hit.
People in the public know about cyber security vulnerabilities and issues affecting Caribbean businesses and do not want to report them. People are afraid to make reports while businesses often respond unkindly when they do. This fear must stop.
Unfortunately, internet users are not obligated to report a cyber security issue they know, whether they found it intentionally or unintentionally. So, it comes down to whether a business will first know about their own from someone with good intentions or after it has been exploited by someone with bad intentions (Attackers).
Ignored reports by Caribbean businesses weaken public belief that they care about protecting sensitive data.
Gavin wants to reshape the relationship between the Caribbean, security professionals and the public to make Cyber Security a team effort. Ultimately, when this relationship is strong, it should minimise the likelihood of successful attacks, reduce cybercrime by Caribbean nationals, and develop a warm and embracing culture towards Cyber Security in the Caribbean.
Realistically, entities have two (2) options when it comes to security issues with their IT assets on the internet.
Validate and remediate reported security issues from external sources before attackers find and exploit them causing financial loss and reputational damage.
Identify your security issues and shun reports from external sources. This option reduces the chances of finding security issues before attackers and gives the impression that a company doesn't care much for protecting their data, which often includes data on people.
Often, businesses find out about their security issues during or after a breach, even worst when it has already been plastered in the media. Let's change that and embrace finding and fixing security issues before attackers hit.
Let's drastically increase computer security awareness and computer literacy in the Caribbean across all twenty-eight (28) countries.
Cyber Security researchers should be encouraged and empowered to privately and responsibly report security issues to affected businesses so they can be fixed.
Let's reduce the big communication gap between respectable cyber security talent and businesses who care about protecting their systems.