Network Security

Columbia University Administrative Policy Library: Computing and Technology

Tue, 22 Dec 2015 17:36:26 Z

Columbia University: Administrative Policy Library Computing and Technology website

NIST SP 800-171 Overview

Wed, 14 Sep 2022 16:00:01 Z

This overview provides a review of the timeline that introduced NIST SP 800-171 "Protecting Controlled Unclassified Information in Nonfederal Systems and Organizations" as a compliance framework, an overview of the control families for the 110 controls and a discussion of the impacts and concerns for higher education.

NIST SP 800-171 Toolkit

Wed, 14 Sep 2022 16:00:01 Z

In this toolkit, you will find an overview of NIST SP 800-171 and its implications for higher education, questions to ask during project planning, 7 Things You Should Know About CMMC to use when speaking with stakeholders and leadership, and a customizable control evaluation.

Arctic EWS Research Paper

Mon, 08 Nov 2021 19:07:53 Z

This is a joint research project of Arctic Security and EDUCAUSE, The goal was to establish the utility of external cybersecurity monitoring for higher education, and to identify services that could be made easily accessible and boost the cyber defenses of the association’s members.

7 Things You Should Know About Endpoint Detection and Response

Tue, 25 May 2021 16:55:56 Z

Endpoint detection and response (EDR) is the process of monitoring endpoint activity in real time, looking for digital threats and implementing measures to halt and remediate those threats.

2021 EDUCAUSE Horizon Report® | Information Security Edition

Wed, 05 Jul 2023 16:33:24 Z

The 2021 EDUCAUSE Horizon Report profiles key trends and emerging technologies and practices shaping the future of information security, and envisions a number of scenarios and implications for that future.

EDUCAUSE Comments: Draft CUI Guidelines for “Critical Programs” and “High Value Assets”

Tue, 06 Aug 2019 20:22:18 Z

On August 2, 2019, EDUCAUSE joined the Council on Governmental Relations (COGR), the Association of American Universities (AAU), the Association of Public and Land-grant Universities (APLU), and the American Council on Education (ACE) in submitting comments to the National Institute of Standards and Technology (NIST) regarding its draft Special Publication 800-171B (NIST SP 800-171B).

Higher Education Information Security Council Charter

Tue, 22 Dec 2015 17:38:03 Z

The HEISC mission is to support higher education institutions as they improve information security governance, compliance, data protection, and privacy programs.

Data Privacy Day Resources, 2017

Wed, 30 Jan 2019 18:04:19 Z

National Data Privacy Day celebrations are held on January 28 each year, and many higher education institutions host awareness events and coordinate activities throughout the months of January and February.

Budget-Conscious Information Security Resources

Tue, 22 Dec 2015 17:38:07 Z

How can institutions that are just starting out with an information security program, or those with even more limited resources, successfully protect institutional IT resources and data?

Data Privacy Day Resources, 2014-16

Tue, 12 Sep 2017 17:02:57 Z

2017 Trends and Technologies: Security, Identity, Privacy, and GRC

Wed, 05 Apr 2017 19:04:02 Z

This report covers the 20 technologies and 9 trends included in the security, identity, privacy, and GRC (governance, risk, and compliance) domain.

Searching for a Smoking Gun, Chasing a Silver Bullet: Data Breaches in Higher Education

Tue, 14 Feb 2017 19:36:15 Z

The EDUCAUSE Center for Analysis and Research (ECAR) published its first look at data breaches in higher education in 2014. Our current research looks at whether any factors increase or decrease the likelihood of a higher education data breach. Is there a smoking gun, something found in every higher education data breach? And, conversely, is there a silver bullet—a control or controls that higher education institutions can employ to prevent data breaches?

Auburn University: Improving Teaching, Learning, and Security Across an Entire Campus Using VMware Technology

Thu, 08 Sep 2016 15:40:20 Z

Join us to explore how Auburn University is addressing myriad pain points by delivering needed applications and content to students, faculty and staff while improving network and data security across the campus.

Tor

Thu, 08 Sep 2016 23:10:45 Z

The Onion Router (Tor) is a popular distributed network of global relays that provides anonymity against network surveillance and traffic analysis. Originally developed for the United States Navy, Tor is a free, open-source tool run by volunteers that helps users keep their browsing habits and physical locations private. Tor can be used for web browsers, instant messaging clients, mobile operating systems, and more.

Splunk

Thu, 08 Sep 2016 23:00:05 Z

Splunk is a log management, search, correlation, and data visualization tool. More institutions are starting to use this type of predictive analytics tool to better understand the large amounts of machine (i.e., log) data being generated across the institution. Better analyzing this data means that more informed business decisions can be made across the institution.

Public Key Infrastructure: Technology Spotlight

Tue, 07 Jun 2016 21:37:02 Z

Public key infrastructure (PKI) certificates form the backbone of most if not all Internet security authentication for sites and services and encrypted network transport today. Higher education is heavily invested in the technology used to create and manage these certificates. PKI supports secure data exchange and authentication over the Internet via the distribution and identification of public encryption keys.

Science DMZ: ECAR-WG Technology Spotlight

Tue, 22 Dec 2015 17:38:08 Z

Science DMZ provides a network-architecture approach optimized for high-performance scientific applications and the transfer of large research data sets over high-speed wide area networks.

IT Security Questionnaire/IT Standards and Requirements Questionnaire

Tue, 22 Dec 2015 17:36:36 Z

The University of Missouri IT Standards and Requirements Questionnaire (ITSRQ), currently in draft form, is predominantly focused on SaaS solutions although it can be readily adapted for other purposes.

Browsing the Web More Securely and More Privately With Firefox On Your Mac

Tue, 22 Dec 2015 17:36:24 Z

This document is meant to help moderately technical users who are security- and privacy-focused make progress toward achieving online security and privacy goals when using an Apple Mac with the Mozilla Firefox browser.