>>>>I need an answer that, hopefully, satisfy the question from a prospective customers. Their Director of Development Security is posing the following question (knowing that I am a one-man shop):
>>>>
>>>>

>>>>what kind of security process is there to insure no cyber threats?
>>>>

>>>>
>>>>What could I tell him to get him off my back? :)
>>>
>>>That your criminal carreer ended beginning of last April ;-)
>>>
>>>Ask him to be more specific, make HIM do the legwork first. Sounds to me there is either someone wanting to get pampered or throwing stones your way. Ask him for the threat matrix he is concerned about and if you get the feeling he is throwing stones, ask him to also provide statistics for the threat matrix: for each vector he is especially concerned ask for percentage in total economy, his branch of business and his company "to get a better picture". ;-))
>>
>>Thank you for your suggestions. But I don't want to ask him any questions. Getting into a pissing contest with a prospective customer is a sure way to lose potential business. I just need to give him some PC answers. I thought of the following items:
>>- I use an advanced AV and Security software on my computer
>>- I create frequent backups of the applications source code and keep it off site
>>- I do not let anybody to connect to my systems, no matter what the reasons.
>>
>>I hope I could add one or two items to the above to make him go away :)
>
>On such an open question he can ALWAYS find areas not mentioned in your answer unless you talk for a full biz day ;-)
>At least let him specify the area he is concerned about
>- the security of your app
>- any holes your app might make in company firewall
>- security of the data
>- possible encryption of data
>- your own security setup
>- access you need personally to work / fix inside the company
>
>and so on.
>
>On the personal side: invest 20$ to buy a second router on Amazon warehouse, build yourself a router cascade at least for your biz machine separating it from browsing/entertainment stuff. If your kids visit often, consider a third router giving a separate subnet for those more in danger of clicking drive-by traps Perhaps put your wife there as well, if you build it. use different routers at each stage, even if that means set-up is harder, as each GUI is different - that is almost a one-time-job.
>
>Minimal cost, but you can milk it when describing, if set up - which, again, is mostly a ONE time job.

Thank you for your suggestions.