Information Security Governance

2024 EDUCAUSE Horizon Report | Cybersecurity and Privacy Edition

Tue, 24 Sep 2024 16:46:52 Z

The 2024 EDUCAUSE Horizon Report profiles key trends and emerging technologies and practices shaping the future of cybersecurity and privacy, and envisions a number of scenarios and implications for that future.

Higher Education Regulated Research Workshop Series: A Collective Perspective

Mon, 12 Jul 2021 19:03:31 Z

After an eight month effort concluding in June of 2021, 155 participants from 84 research institutions from across the United States gathered in six facilitated, NSF-sponsored workshop sessions to determine if coming together as a community could improve the support of individual programs to secure regulated data in research involving the Department of Defense or health sciences.

EDUCAUSE Comments: Draft CUI Guidelines for “Critical Programs” and “High Value Assets”

Tue, 06 Aug 2019 20:22:18 Z

On August 2, 2019, EDUCAUSE joined the Council on Governmental Relations (COGR), the Association of American Universities (AAU), the Association of Public and Land-grant Universities (APLU), and the American Council on Education (ACE) in submitting comments to the National Institute of Standards and Technology (NIST) regarding its draft Special Publication 800-171B (NIST SP 800-171B).

Information Security Program Assessment Tool

Tue, 22 Dec 2015 17:38:04 Z

This self-assessment tool was created to evaluate the maturity of higher education information security programs using as a framework the International Organization for Standardization (ISO) 27002:2013 "Information Technology Security Techniques.

DIY Information Security Peer Review Assessment Toolkit

Tue, 15 May 2018 17:23:19 Z

This paper was prepared by members of the Higher Education Information Security Council (HEISC) to provide guidance for conducting peer-review assessments of higher education information security programs. Learn more about HEISC and the EDUCAUSE Cybersecurity Program.

Budget-Conscious Information Security Resources

Tue, 22 Dec 2015 17:38:07 Z

How can institutions that are just starting out with an information security program, or those with even more limited resources, successfully protect institutional IT resources and data?

HEISC Webinar : From Art to Science: How Risk Can Transform Your Information Security Program

Wed, 31 May 2017 16:23:09 Z

IT and information security risk are a fact of life in modern colleges and universities. Learn how to leverage a risk-based model to improve the maturity of your information security program versus using a technology or compliance centric approach. Our three speakers will provide a better understanding of the risk management process and discuss how risk can help information security support innovation, teaching, and collaboration in higher ed.

The EDUCAUSE Information Security Almanac 2017

Wed, 10 May 2017 15:18:10 Z

This two-page, easy-to-scan almanac shares the most important EDUCAUSE data regarding the state of information security in higher education. Data for this almanac are derived from the EDUCAUSE Core Data Service and the EDUCAUSE Center for Analysis and Research.

Searching for a Smoking Gun, Chasing a Silver Bullet: Data Breaches in Higher Education

Tue, 14 Feb 2017 19:36:15 Z

The EDUCAUSE Center for Analysis and Research (ECAR) published its first look at data breaches in higher education in 2014. Our current research looks at whether any factors increase or decrease the likelihood of a higher education data breach. Is there a smoking gun, something found in every higher education data breach? And, conversely, is there a silver bullet—a control or controls that higher education institutions can employ to prevent data breaches?

2015 CDS Benchmarking Report

Fri, 11 Mar 2016 15:58:27 Z

The 2015 Core Data Service (CDS) Benchmarking Report summarizes key findings from the CDS 2015 survey, provides a glimpse into the breadth of CDS data, and ultimately provides you with an opportunity to conduct your own benchmarking assessment. The customizable graphs contained within this report are meant to be used to assess your IT operation compared to that at peer institutions of similar size, control, or Carnegie Classification.

CDS Spotlight: Information Security

Tue, 22 Dec 2015 17:37:59 Z

This research bulletin uses data from Modules 1 and 7 of the EDUCAUSE Core Data Service to examine the current state of information security in higher education.

2014 CDS Benchmarking Report

Tue, 22 Dec 2015 17:37:37 Z

Traditionally, the Core Data Service annual report has summarized the state of higher education IT; however, the strength of CDS data are shown through their benchmarking capability.

Resources for Presidents and Senior Executives: Information Security

Tue, 22 Dec 2015 17:36:57 Z

These executive briefs are designed to help institutional leaders optimize the impact of IT in higher education.

CDS Spotlight: Information Security

Tue, 22 Dec 2015 17:36:25 Z

This research bulletin uses data from Modules 1 and 7 of the EDUCAUSE Core Data Service to examine the current state of information security in higher education.

Developing A Comprehensive Privacy Program: A Step-By-Step Guide

Tue, 22 Dec 2015 17:34:55 Z

Daniel Solove wrote Developing A Comprehensive Privacy Program: A Step-By-Step Guide in 2013 for The National Assoication of College and University Attorneys (NACUA).

Understanding and Managing the Risks of Analytics in Higher Education: A Guide

Tue, 22 Dec 2015 17:34:08 Z

This guide provides an introduction to the major risk categories faced by a higher education institution considering investments in time, energy, and money in analytics work.

HEISC Town Hall Webinar: 2012-2013 Strategic Plan

Tue, 22 Dec 2015 17:33:01 Z

In this webinar, the Higher Education Information Security Council (HEISC) discussed the following topics;

Digital Capabilities in Higher Education, 2016: Information Security

Thu, 30 Nov 2017 22:13:44 Z

This report examines the status of information security maturity and deployment in higher education. The maturity and deployment indices are based on contributions to the EDUCAUSE Core Data Service.

InfoSec Leadership Survey 2016

Tue, 03 May 2016 17:08:31 Z

This survey seeks to understand skills required of information security leaders in higher education.

Risk Classifications

Tue, 22 Mar 2016 20:47:07 Z