2008 Corporate Social Responsibility Report

CSR Report: The Network

A secure network is essential for community, economic, and market development and sustainable business success. Our challenge is to make the network open to legitimate users, while keeping it closed to those who would do mischief or real harm.

Security applies to our business in two ways: the security of our products and the security of our own network, which affects our employees, customers, partners, developers, and suppliers.

We strive to enhance product security and promote security in our industry. Our participation in industry organizations and other communities working on network security is a key part of this. We participate with these security groups:

Security


Internal Security

More than 4,000 Sun employees are bloggers and more than 5,000 employees communicate via the social networking site Facebook — and these numbers are growing daily. We own seven islands in the virtual world Second Life, where we stage public and private events. Although we're driving the standards that could eventually make all Internet communications safer and more secure, there's still much to be done. And that makes it all the more essential that we manage and protect the online resources and communities under our control, to protect our employees and our reputation.

Our Information Technology Security Office (ITSO) makes sure the right people have access to these resources while protecting them from people who may misuse them. Led by Chief Information Security Officer (CISO) Leslie Lambert, the team is responsible for keeping Sun online. The ITSO manages information security risk by assessing and addressing information security threats and vulnerabilities, detecting intrusions, managing incidents, and protecting our network from malware, viruses, and other security threats. The team works to embed security controls into our processes in line with industry standards. The same security policies and standards apply to our partners to ensure that they share responsibility for managing security with us.

The ITSO provides employees with direction, guidance, and training through our information security policies and awareness programs. Sun leads and supports a number of security communities for Sun and our partners: