Computer Security Institute

== History ==

The Computer Security Institute (CSI) was a [Professional_body] serving practitioners of information, [Computer_networking], and computer-enabled physical security, from the level of [System_administrator] to the [Chief_information_security_officer]. It was founded in 1974. [1] CSI originally began as a small professional membership organization that catered to a broad spectrum of security professionals, ranging from system administrators managing local networks to chief information security officers overseeing enterprise‑wide risk strategies. Its early mission emphasized the development of best‑practice standards, the dissemination of research findings, and the fostering of a community where peers could exchange insights on emerging threats. Over the ensuing decades, CSI expanded its scope to include training programs, certification pathways, and a suite of publications that chronicled the evolution of cyber‑defense tactics.

== Conferences ==

CSI used to conduct two [Business_conference] per year — the Annual Computer Security Conference and Exhibition and CSI SX. [Internet] entrepreneur [Jimmy_Wales] was a [Keynote] speaker at CSI’s Annual Conference, held November 6–8, 2006, in [Orlando,_Florida]. [2] The Annual Computer Security Conference and Exhibition was a flagship event that attracted thousands of security practitioners, vendors, and academics who gathered to present cutting‑edge research, demonstrate new technologies, and network across sectors. CSI SX, a more intimate symposium, focused on specialized topics such as digital forensics and secure software development. Both events were renowned for their rigorous agenda, high‑profile speakers, and the opportunity they provided for attendees to engage directly with policymakers and industry leaders. The 2006 conference featured a series of workshops on cloud security, a demo zone showcasing next‑generation encryption hardware, and panel discussions on the legal implications of data privacy.

== Surveys ==

CSI is perhaps best known for the annual [CSI/FBI Computer Crime and Security Survey] that it began to conduct in 1996 in collaboration with the San Francisco Federal Bureau of Investigation’s Computer Intrusion Squad and researchers from the [Robert_H._Smith_School_of_Business] at the [University_of_Maryland,_College_Park]. [3][4][5] The survey collected detailed quantitative data on the financial impact of security breaches, the prevalence of various attack vectors, and the effectiveness of defensive controls. Over its fifteen‑year lifespan, the study became a benchmark for policymakers, insurers, and risk managers seeking to understand the economic dimensions of cyber incidents. The FBI disappeared from the title of the study between the 2006 and 2007 reports, reflecting a shift in federal involvement. The 15th annual survey, which turned out to be the last, was released in 2011, and is available to the general public at Information Week. The data set from that final report included breakdowns by industry sector, an analysis of insider threat trends, and recommendations for improving incident response coordination.

== Government Collaboration ==

CSI staff, including Richard Power, testified as [Expert_witness] before [United_States_Senate] committee hearings. [6] Power’s testimony, delivered in 1996, highlighted the growing economic costs of computer insecurity and urged legislators to fund research into defensive technologies. His appearance before the Senate underscored CSI’s role as a bridge between the private security community and public policy, influencing legislative proposals that later shaped the nation’s cybersecurity posture.

== Absorption and Legacy ==

In 2011, CSI was absorbed by [UBM] [7] although no mention of this appears on the UBM Wikipedia page yet. As of September 2014, the original CSI website returns a [404_error] File Not Found error. However, snapshots of the website can be found on the [Wayback_Machine] [8][9] The absorption marked the end of CSI’s independent operations, but its legacy persisted through the continued dissemination of its research reports and the influence of its former staff on subsequent security initiatives. Former CSI analysts contributed to the development of standards at national cybersecurity agencies, and the organization’s archival material remains a valuable historical resource for scholars studying the maturation of information security as a discipline.

== Notes ==

• ^ About the Computer Security Institute Archived 2007-09-28 at the Wayback Machine at official website for CSI, URL last accessed October 16, 2006.

• ^ Keynote Sessions Schedule at official website for Computer Security Conference & Exhibition, URL last accessed October 4, 2006.

• ^ Radcliff, Deborah, Cyber project targets break‑ins – FBI/Computer Security Institute report – Industry Trend or Event , Software Magazine, November 1, 1997 (URL last accessed October 16, 2006).

• ^ Hatcher, Thurston, Survey: Costs of computer security breaches soar Archived 2007-03-11 at the Wayback Machine , CNN.com , March 12, 2001 (URL last accessed October 16, 2006).

• ^ What’s the Current State of Computer Network Security? , Federal Bureau of Investigation press release, July 25, 2005 (URL last accessed October 16, 2006).

• ^ Testimony of Richard G. Power before The Permanent Subcommittee on Investigations, U.S. Senate Committee on Governmental Affairs , hosted by Federation_of_American_Scientists website, June 5, 1996 (URL last accessed October 16, 2006).

• ^ CSI Joins UBM Techwebs Archived 2015-05-31 at the Wayback Machine

• ^ Snapshots of gocsi.com at archive.org

== External links ==

• Official Website of the FBI Computer Intrusion Squad

== Authority control ==

Authority control databases International

• ISNI • VIAF • GND

National

• United States • Israel

People

• Trove

Article: