>>Hi,
>>
>>I need an answer that, hopefully, satisfy the question from a prospective customers. Their Director of Development Security is posing the following question (knowing that I am a one-man shop):
>>
>>

>>what kind of security process is there to insure no cyber threats?
>>

>>
>>What could I tell him to get him off my back? :)
>
>That your criminal carreer ended beginning of last April ;-)
>
>Ask him to be more specific, make HIM do the legwork first. Sounds to me there is either someone wanting to get pampered or throwing stones your way. Ask him for the threat matrix he is concerned about and if you get the feeling he is throwing stones, ask him to also provide statistics for the threat matrix: for each vector he is especially concerned ask for percentage in total economy, his branch of business and his company "to get a better picture". ;-))

Thank you for your suggestions. But I don't want to ask him any questions. Getting into a pissing contest with a prospective customer is a sure way to lose potential business. I just need to give him some PC answers. I thought of the following items:
- I use an advanced AV and Security software on my computer
- I create frequent backups of the applications source code and keep it off site
- I do not let anybody to connect to my systems, no matter what the reasons.

I hope I could add one or two items to the above to make him go away :)