Security Risk Assessment and Analysis - 210 Resources

Overview
Publications (76)
Presentations (92)
Policies (1)
Podcasts (8)
Blogs (33)

Overview

Resources Developed by the EDUCAUSE & Internet2 Higher Education Information Security Council (HEISC)

Risk Analysis and Security Evaluation Tools

Updated March 2010

Publications (76)

EDUCAUSE publications address a diverse range of professional challenges in higher education IT, from updates on current developments to explorations of important overarching issues. Listed below are the full range of research, reports and other publications that EDUCAUSE and its members have written about Security Risk Assessment and Analysis.

Item ID	Title	Pub Date	Views
ERM1142	Alternative IT Sourcing: A Discussion of Privacy, Security, and Risk	07/21/2011	871
CSD6024	Guide to Enterprise Telework and Remote Access Security (SP 800-46 Revision 1)	06/04/2009	110
EST1008	7 Things You Should Know About Cloud Security	09/03/2010	2,063
CSD5820	Cyber-Insurance Revisited	01/05/2005	168
CSD5823	Risk Management and Cyber Insurance	10/07/2007	148
CSD5825	Cyber-Insurance Advancement Underscores Data Breach Risk Recognition	01/15/2009	136
CSD5839	IT Security Information - IT Risk Management	01/11/2008	477
ERB0817	Information Security Governance: Standardizing the Practice of Information Security	08/19/2008	7,366
CSD5876	Compliance Matrix Poster for IT & Compliance Professionals	03/17/2010	3,135
CSD5915	Ten Steps to Secure Your Copier or Multi-Function Device (MFD)	06/03/2010	218
CSD5721	Directions in Security Metrics Research	08/20/2009	273
CSD5724	Risk Assessment Standards Toolkit: Practical Guidance in Implementing Statements on Auditing Standards 104 Through 111	05/21/2009	850
CSD5737	Information Technology Sector Baseline Risk Assessment	08/28/2009	903
CSD5767	RFP Template for Information Security Projects	11/10/2009	5,405
ERM0653	A Unified Approach to Information Security Compliance	01/01/2006	23,942
ECP0901	The Career of the IT Security Officer in Higher Education	07/01/2009	2,737
LIVE0912	Information Security from the Ground Up	07/08/2009	361
EQM07313	Complete Guide to Security and Privacy Metrics: Measuring Regulatory Compliance, Operational Resilience, and ROI - Book Review	08/29/2007	7,821
CSD4380	Risk Management Framework	01/01/2006	13,513
EQM0622	Current IT Issues Survey Report, 2006	01/01/2006	10,102
CSD5494	Security Task Force 2008–2009 Strategic Plan: Safeguarding Our IT Assets, Protecting Our Community’s Privacy	09/03/2008	1,049
CSD5586	Information Technology Security Risk Management (ITS-RM) Program	12/12/2008	942
CSD5587	Compliance Assessment Template	09/24/2008	3,124
ESI08B	IT Security Officer Survey	04/09/2008	1,978
EQM0838	Information Sharing for IT Security Professionals	08/04/2008	1,698

Presentations (92)

Stepping away from the distractions of normal routine to meet with peers, share experiences, and learn together can be invaluable. EDUCAUSE places great emphasis on the face-to-face meeting experience, offering you numerous opportunities throughout the year to gather with colleagues - from small regional events and special topic meetings to large, national conferences covering the full spectrum of roles and issues important to higher education. For more information on EDUCAUSE conferences and seminars, please see our Frequently Asked Questions page. Listed below is the full range of presentations EDUCAUSE and its members tagged with Security Risk Assessment and Analysis

Item ID	Title	Pub Date	Views
MARC11_218875	Proactive Compliance Through Information Systems Risk Management	01/12/2011	234
MARC12_237335	The Economics of an IT Governance, Risk, and Compliance Solution	01/13/2012	124
E11_229291	Practical Approaches to Effective Risk Management	10/20/2011	224
SWRC10_198969	Building and Assessing an Information Security Program	02/18/2010	322
SWRC10_199042	The Journey to a Successful Risk Assessment: One Strategy Unveiled	02/19/2010	272
LIVE105	ISAAC (Information Security Awareness, Assessment, and Compliance): A Success Story	02/24/2010	546
NC10_201143	Unearthing Sensitive Data--Scaled to Your Institution	03/10/2010	98
SEC09_201211	Finding Confidential Information on Compromised Computers	04/21/2009	47
SEC10_203036	Taking Risk Assessment from Project to Process: A Novel Approach	04/13/2010	418
SEC10_203047	Foundations for Effective Security Risk and Program Assessment	04/13/2010	665
SEC11_222489	Raising Awareness of Website Vulnerability: How to Protect Your University's Site from Threats	04/05/2011	166
SEC11_222394	Sensitive Data and Public Systems: Free Tools and Tactical Approaches to Reduce Information Exposure Risk	04/05/2011	282
SEC11_222467	Seminar 01A - Our Shared Risk, Our Shared Responsibility: Learning to Prevent Confidential Data Loss PLEASE NOTE: Separate registration and fee are required to attend this seminar.	04/04/2011	283
SEC11_222454	Meeting Information Security Awareness Needs, and the Campus Likes It!	04/05/2011	490
SEC11_222418	Do They Measure Up? Assessing the Security Posture of Third-Party Service Providers	04/05/2011	427
E08_177997	Using Nontraditional Security Risk Assessments to Clearly Express Risk, Make Persuasive Budget Requests, and Showcase Positive Trends	10/30/2008	114
CYB09_179766	Intrusion Detection: Getting to Know Bro	09/14/2009	177
E10_208280	IdM/IAM and Remote Student Services: Risk Assessment and Identity Management Practices	10/15/2010	402
MWRC09_48481	Information Security from the Ground Up	03/23/2009	270
SEC09_170612	Novel Approaches to Developing Governance, Risk, and Compliance Programs	04/23/2009	418
SEC09_170555	REN-ISAC and CSI2—The Security Event System	04/22/2009	553
SEC09_170502	Conducting Internal PCI DSS Assessments	04/22/2009	463
SEC09_170497	A Tour of the Security Task Force's IT Risk Management Framework	04/22/2009	478
SEC09_170784	Improving Security Event Correlation and Analysis Using Intelligent Agents	04/27/2009	614
SEC09_171021	Leveraging Resources in Building Your Information Security Program	05/03/2009	266

Policies (1)

Item ID	Title	Resource Category	Pub Date	Views	Ranking
CSD4951	IT Security Risk Assessment Brian Basgen Policies and Procedures	Community Contributions	06/11/2007	2,364

Podcasts (8)

Name	Views	Post date
Podcast: The FTC as an Educational Partner in Improving Data Security and Privacy Play \| Show Notes \| Download (25.88 MB audio/mpeg)	173	05/19/2008
Podcast: Addressing Complex Security Threats Through Risk Management Play \| Show Notes \| Download (27.64 MB audio/mpeg)	469	05/16/2008
E07 Podcast: An Interview with Cedric Bennett - Security Concerns and Risk Management Play \| Show Notes \| Download (13.65 MB audio/mpeg)	921	11/01/2007
E07 Podcast: Bruce Schneier on Information Security: Ten Trends Play \| Show Notes \| Download (34.17 MB audio/mpeg)	6,100	10/31/2007
2007 Enterprise Conference: The Adaptable University Play \| Show Notes \| Download (38.17 MB audio/mpeg)	3,447	06/15/2007
EDUCAUSE2006 Podcast: How to Successfully Defend Play \| Show Notes \| Download (33.74 MB audio/mpeg)	3,645	03/31/2007
E2005 Podcast: Security Assessments for Information Technology Play \| Show Notes \| Download (24.82 MB audio/mpeg)	4,148	04/05/2006
E2005 Podcast: A Successful Tool to Create Positive Change Play \| Show Notes \| Download (24.28 MB audio/mpeg)	3,690	03/28/2006

Blogs (33)

EDUCAUSE hosts a number of blogs for its members. To view a list of all our blogs, click here.

Title	Blogger	Posted	Views
Shared Assessment of Security	Petr R. Brym, University of New Hampshire	10/14/2011	41
Save the Date: 2012 Shared Assessments Summit	Valerie M. Vogel, EDUCAUSE	06/23/2011	76
Security Sessions at the 2011 EDUCAUSE Enterprise Conference	Valerie M. Vogel, EDUCAUSE	05/11/2011	37
Register Now for the 2011 Security Professionals Conference	Valerie M. Vogel, EDUCAUSE	01/31/2011	60
Top Information Security Concerns for Campus Executives & Data Stewards	Valerie M. Vogel, EDUCAUSE	09/21/2010	100
EDUCAUSE Releases "7 Things You Should Know About Cloud Security"	Valerie M. Vogel, EDUCAUSE	09/08/2010	48
EDUCAUSE Releases "7 Things You Should Know About Cloud Security"	James Berg, EDUCAUSE	09/07/2010	222
Shaping the Higher Education Cloud White Paper--Now Available Online	Valerie M. Vogel, EDUCAUSE	05/24/2010	136
Shaping the Higher Education Cloud White Paper--Now Available Online	Valerie M. Vogel, EDUCAUSE	05/24/2010	118
NIST Releases Guide to Protecting the Confidentiality of PII	Valerie M. Vogel, EDUCAUSE	04/19/2010	350
Exploring or Supporting Federated Access? Come to InCommon CAMP	Valerie M. Vogel, EDUCAUSE	03/31/2010	44
Tune In February 24: ISAAC (Information Security Awareness, Assessment, and Compliance): A Success Story	Ashlan Sarff, EDUCAUSE	02/18/2010	136
Updated Version of the Data Protection Contractual Language Toolkit Available	Valerie M. Vogel, EDUCAUSE	11/30/2009	178
SANS: The Top Cyber Security Risks	Valerie M. Vogel, EDUCAUSE	09/29/2009	492
Tune In July 8: Information Security from the Ground Up	Valerie M. Vogel, EDUCAUSE	07/01/2009	99
ECAR Publishes New Occasional Paper on IT Security Officer Careers	Valerie M. Vogel, EDUCAUSE	07/01/2009	130
Tune In July 8: Information Security from the Ground Up	Peggy Kurkowski, EDUCAUSE	06/30/2009	272
NIST Publishes Final Version of the Guide to Enterprise Telework and Remote Access Security	Valerie M. Vogel, EDUCAUSE	06/16/2009	219
Consensus Audit Guidelines Version 1.0 Released	Valerie M. Vogel, EDUCAUSE	03/24/2009	874
Register Now for the 2009 Security Professionals Conference to Save with Low Rates	Colleen Luckett, EDUCAUSE	02/06/2009	675
Security Task Force 2008–2009 Strategic Plan: "Safeguarding Our IT Assets, Protecting Our Community's Privacy"	Valerie M. Vogel, EDUCAUSE	09/08/2008	376
EDUCAUSE Summit: The Role of IT in Campus Security and Emergency Management	Carie Page, EDUCAUSE	08/15/2008	277
New Risk Assessment Resources Available	Valerie M. Vogel, EDUCAUSE	03/14/2008	382
EDUCAUSE Security Conference: Incident Tracking and Reporting	Lida Larsen, EDUCAUSE	04/20/2007	5,280
EDUCAUSE Security Conference: Secrets of Superspies	Lida Larsen, EDUCAUSE	04/17/2007	3,724

Do you have a great resource that should be listed here? Email contribute@educause.edu with your recommendation!