Identity and Access Management

Abstract: Gender Data and Demographics Toolkit

Wed, 15 Jan 2025 17:50:16 Z

This Toolkit should serve as a resource to help better understand gender data and demographics. Collecting, storing, and sharing such data carries risks that need to be understood and addressed.

NIST SP 800-171 Toolkit

Wed, 14 Sep 2022 16:00:01 Z

In this toolkit, you will find an overview of NIST SP 800-171 and its implications for higher education, questions to ask during project planning, 7 Things You Should Know About CMMC to use when speaking with stakeholders and leadership, and a customizable control evaluation.

7 Things You Should Know About Endpoint Detection and Response

Tue, 25 May 2021 16:55:56 Z

Endpoint detection and response (EDR) is the process of monitoring endpoint activity in real time, looking for digital threats and implementing measures to halt and remediate those threats.

2021 EDUCAUSE Horizon Report® | Information Security Edition

Wed, 05 Jul 2023 16:33:24 Z

The 2021 EDUCAUSE Horizon Report profiles key trends and emerging technologies and practices shaping the future of information security, and envisions a number of scenarios and implications for that future.

Boston University Data Protection Standards

Tue, 22 Dec 2015 17:36:23 Z

Boston University Data Protection Standards were created with the input and approval of the Information Security and Business Continuity Governance Committee and are intended to help the University more easily meet the legal, regulatory and best practice requirements that apply to our environment.

Two-Factor Authentication: Lessons Learned

Tue, 22 Jan 2019 17:54:38 Z

Two-factor authentication provides a straightforward way to increase the security of online systems and resources, and implementing the technology requires cultural as well as technical change.

7 Things You Should Know About Federated Identity

Wed, 16 Jan 2019 16:03:39 Z

Federation is a service provided by a third party that enables participating organizations to leverage home organizations' digital identities to access partner resources by implementing a common standard for technical interoperation

Why Cybersecurity Matters: and What Registrars, Enrollment Managers and Higher Education Should Do About It

Fri, 28 Sep 2018 21:00:13 Z

The purpose of this white paper, jointly written by the National Student Clearinghouse, EDUCAUSE and REN-ISAC, is to build upon registrars’, enrollment managers’, IT’s and higher education’s day-to-day, nationwide dialog around cybersecurity and vulnerabilities.

Budget-Conscious Information Security Resources

Tue, 22 Dec 2015 17:38:07 Z

How can institutions that are just starting out with an information security program, or those with even more limited resources, successfully protect institutional IT resources and data?

Internet2 Collaborative Innovation Community Update

Wed, 31 Jan 2018 19:58:27 Z

In this webinar, hosted by the EDUCAUSE Working Groups, Emily Nichols (Innovation Program Manager, Internet2) provides an update on three of Internet2's Innovation Program working groups -- Internet of Things (IoT), End-to-End Trust & Security (E2ET&S), and Distributed Big Data & Analytics (DBDA).

The EDUCAUSE Information Security Almanac 2017

Wed, 10 May 2017 15:18:10 Z

This two-page, easy-to-scan almanac shares the most important EDUCAUSE data regarding the state of information security in higher education. Data for this almanac are derived from the EDUCAUSE Core Data Service and the EDUCAUSE Center for Analysis and Research.

2017 Trends and Technologies: Cloud

Thu, 04 May 2017 14:40:00 Z

This report covers the 12 technologies and 8 trends included in the cloud domain.

2016 EDUCAUSE Core Data Service (CDS) Benchmarking Report

Tue, 11 Apr 2017 16:05:33 Z

The 2016 Core Data Service (CDS) Benchmarking Report summarizes key findings from the CDS 2016 survey, provides a glimpse into the breadth of CDS data, and ultimately provides you with an opportunity to conduct your own benchmarking assessment.

2017 Trends and Technologies: Security, Identity, Privacy, and GRC

Wed, 05 Apr 2017 19:04:02 Z

This report covers the 20 technologies and 9 trends included in the security, identity, privacy, and GRC (governance, risk, and compliance) domain.

IT Considerations in Implementing Preferred Name Policies

Wed, 30 Nov 2016 17:10:24 Z

This document lists some IT and policy questions that must be considered in implementing processes within IT systems to support a student’s gender identity, such as preferred name, preferred gender specification, and preferred pronoun (collectively referred to as “preferred name” in this resource).

eduroam

Tue, 12 Jul 2016 18:08:39 Z

Eduroam is a federated wireless access service that allows researchers, staff, and students to access a secure Wi-Fi network connection using their credentials at their home institution or while visiting other campuses.

Public Key Infrastructure: Technology Spotlight

Tue, 07 Jun 2016 21:37:02 Z

Public key infrastructure (PKI) certificates form the backbone of most if not all Internet security authentication for sites and services and encrypted network transport today. Higher education is heavily invested in the technology used to create and manage these certificates. PKI supports secure data exchange and authentication over the Internet via the distribution and identification of public encryption keys.

OpenPGP: Technology Spotlight

Wed, 04 May 2016 21:56:34 Z

OpenPGP is a nonproprietary encryption suite that uses public key encryption to exchange e-mail messages and files (either e-mail attachments or files that might be exchanged via other means, e.g., web-based transfers) between individuals within and across institutions. OpenPGP can also secure files stored on mobile devices or in the cloud.

An Introduction to NIST Special Publication 800-171 for Higher Education Institutions

Mon, 18 Apr 2016 15:39:58 Z

This introduction to NIST 800-171 provides a brief overview of the special publication, how Controlled Unclassified Information (CUI) is defined, common types of data in higher education that “may” be called CUI, and what intuitional information should be “out of scope.” To illustrate how institutions are currently responding to NIST 800-171, three brief case studies are provided by the University of Notre Dame, the University of Pittsburgh, and North Carolina State University.

The EDUCAUSE Information Security Almanac 2019

Wed, 10 Apr 2019 15:46:15 Z

This two-page, easy-to-scan almanac shares the most important EDUCAUSE data regarding the state of information security, privacy, and identity management in higher education.