According to the SA-ISPA, it members are having to responding faster than ever before to complaints about spam and phishing attempts originating from their networks. As a result, the association says it has undertaken a series of tests to ensure that its members are reacting quickly to abuse reports they receive from other ISPs and the public.
The SA-ISPA code of conduct demands that all members have a working, actively monitored abuse address to which customers, other ISPs and internet users can report issues such as spam and phishing.
Testing, says the association, is carried out by sending test messages to members’ registered abuse addresses, and tracking the responses. When these test messages bounce back or receive either no response or a slow response from the ISPA members concerned, those members are deemed to be non-compliant with the association’s code of conduct. A lack of a registered abuse address is also a violation of the code of conduct.
SA-ISPA adds that it takes the fight against spam and phishing very seriously because they result in a higher cost base for ISPs and higher costs, security risks and a degraded experience for the end-user.
According to the code of conduct, ISPA members must not send or promote the sending of unsolicited bulk email and must take reasonable measures to ensure that their networks are not used by others for this purpose. They must also provide a facility for dealing with complaints regarding unsolicited bulk e-mail and unsolicited commercial communications, originating from their networks. They are also required to react quickly to any complaints they receive.
The results of the most recent tests, says the association, shows a dramatic improvement in the responsiveness of ISPA members to complaints sent to their abuse addresses. 50% of members responded within one hour to abuse reports, compared to 37% towards the end of 2010.
Some 63%, meanwhile, responded within five hours (48% in the previous study) and in total, 71% had responded to the test emails. The final total was actually a 76% response rate (119 of ISPA’s 156 members) because 10 members registered a failed delivery and 27 simply did not respond to the test.
Only 1% percent of members had no registered address compared to 11% the last time compliance testing was done.
The SA-ISPA said that the regular compliance tests that the association undertakes help to keep members on their toes. The few that have still not fully complied with the code’s prescriptions around abuse reports have been warned that they are not meeting the association's requirements and asked to boost their service as soon as possible.