https://library.educause.edu/topics/cybersecurity/security-metricsen{611457BC-A06A-4447-974E-2714FF000FD8}https://library.educause.edu/resources/2022/9/nist-sp-800-171-toolkitIn this toolkit, you will find an overview of NIST SP 800-171 and its implications for higher education, questions to ask during project planning, 7 Things You Should Know About CMMC to use when speaking with stakeholders and leadership, and a customizable control evaluation.Wed, 14 Sep 2022 16:00:01 Z{97BA0537-826E-4FEA-9604-CC50250210B1}https://library.educause.edu/resources/2018/5/diy-information-security-peer-review-assessment-toolkitThis paper was prepared by members of the Higher Education Information Security Council (HEISC) to provide guidance for conducting peer-review assessments of higher education information security programs. Learn more about HEISC and the EDUCAUSE Cybersecurity Program.Tue, 15 May 2018 17:23:19 Z{4E269C4F-5D87-45ED-8567-B2ED0EDD818B}https://library.educause.edu/resources/2017/5/the-educause-information-security-almanac-2017This two-page, easy-to-scan almanac shares the most important EDUCAUSE data regarding the state of information security in higher education. Data for this almanac are derived from the EDUCAUSE Core Data Service and the EDUCAUSE Center for Analysis and Research.Wed, 10 May 2017 15:18:10 Z{7C946335-E94F-402F-AC82-888F7F15B932}https://library.educause.edu/resources/2017/2/searching-for-a-smoking-gun-chasing-a-silver-bullet-data-breaches-in-higher-educationThe EDUCAUSE Center for Analysis and Research (ECAR) published its first look at data breaches in higher education in 2014. Our current research looks at whether any factors increase or decrease the likelihood of a higher education data breach. Is there a smoking gun, something found in every higher education data breach? And, conversely, is there a silver bullet—a control or controls that higher education institutions can employ to prevent data breaches?Tue, 14 Feb 2017 19:36:15 Z{F11CD077-2911-4045-9304-85C3DE85A453}https://library.educause.edu/resources/2016/8/cds-spotlight-information-securityThis research bulletin uses data from Modules 1 and 7 of the EDUCAUSE Core Data Service to examine the current state of information security in higher education. Wed, 10 Aug 2016 15:26:44 Z{033532DD-E81E-4799-99A4-ECF2436210CD}https://library.educause.edu/resources/2015/6/cds-spotlight-information-securityThis research bulletin uses data from Modules 1 and 7 of the EDUCAUSE Core Data Service to examine the current state of information security in higher education.Tue, 22 Dec 2015 17:37:59 Z{F4A24A16-E2D1-4A9A-85E2-3CB5445F1A80}https://library.educause.edu/resources/2015/4/2015-strategic-information-security-issues-infographicFeaturing data from the EDUCAUSE Center for Analysis and Research and the EDUCAUSE Core Data Service, this infographic highlights the 2015 Top Information Security Strategic Issues selected by the Higher Education Information Security Council (HEISC) in August 2014.Tue, 22 Dec 2015 17:37:41 Z{D0F6B88E-A7D1-4197-BD92-925561721068}https://library.educause.edu/resources/2014/1/7-things-you-should-know-about-information-security-metricsAn information security metric is an ongoing collection of measurements to assess security performance, based on data collected from various sources.Tue, 22 Dec 2015 17:36:16 Z{95811B7D-9DC9-4CE2-957F-D896292612C7}https://library.educause.edu/resources/2013/12/measuring-the-effectiveness-of-security-awareness-programsCitation for this Work: McElroy, Lori, and Eric Weakland. “Measuring the Effectiveness of Security Awareness Programs” (Research Bulletin).Tue, 22 Dec 2015 17:35:07 Z{76508FB8-830D-4ACC-84AC-277AB2D823F8}https://library.educause.edu/resources/2009/8/directions-in-security-metrics-researchMore than 100 years ago, Lord Kelvin insightfully observed that measurement is vital to deep knowledge and understanding in physical science.Tue, 22 Dec 2015 17:20:19 Z{FDCBA6CF-B935-4255-A12F-51370A214F58}https://library.educause.edu/resources/2008/5/cybersecurity-research-challengesTue, 22 Dec 2015 17:17:35 Z{AC4FF59C-B0BF-4905-8F80-C8C716D5FA7A}https://library.educause.edu/resources/2006/5/guide-for-developing-performance-metrics-for-information-security-recommendations-of-the-national-institute-of-standards-and-technologyThis publication focuses on developing and implementing information security metrics for an information security program.Tue, 22 Dec 2015 17:10:01 Z{DBCBA9E8-DC24-49D8-9D3E-639246807FF4}https://library.educause.edu/resources/2004/1/corporate-information-security-working-groupThe Corporate Information Security Working Group (CISWG) was originally convened in November 2003 by Representative Adam Putnam (R-FL).Tue, 22 Dec 2015 17:01:14 Z{17C9BDAB-981C-443B-8CDE-1B0C691C9F92}https://library.educause.edu/resources/2019/4/the-educause-information-security-almanac-2019This two-page, easy-to-scan almanac shares the most important EDUCAUSE data regarding the state of information security, privacy, and identity management in higher education.Wed, 10 Apr 2019 15:46:15 Z