Security Risk Assessment and Analysis - 173 Resources

Overview

Assessment is an estimate of the harm to business likely to result from a security failure and the likelihood of such a failure occuring, given the threat environment and the measures in place to prevent a failure. Risk Analysis is the process of indentifying an organization's information resources, existing controls, security risks, and vulnerabilities; determining their magnitude; and indentifying areas needing safeguards. It establishes a potential level of damage in dollars and/or other assets.

Publications (70)

EDUCAUSE publications address a diverse range of professional challenges in higher education IT, from updates on current developments to explorations of important overarching issues. Listed below are the full range of research, reports and other publications that EDUCAUSE and its members have written about Security Risk Assessment and Analysis.

Keywords

• ‹‹
• 3 of 3
•  

Item ID	Title	Resource Category	Pub Date	Views	Ranking
CSD4950	Confidential Data Handling Blueprint Plans and Guidelines	Higher Education Information Security Council (formerly the Security Task Force)	06/11/2007	2,076
CSD2602	security.vt.edu Certification, Education, Training and Tutorials	Community Recommendation	01/01/2002	4,685
CSD4298	The Lasting Impact of Sony's Rootkit Michael A. Geist Blogs	Community Recommendation	01/01/2005	2,305
CSD4299	Signaling Vulnerabilities in Wiretapping Systems Micah Sherr, Eric Cronin, Sandy Clark and Matt Blaze Articles, Papers, and Reports	Community Recommendation	01/01/2005	2,312
CSD4580	Locking Down Departmental Data Doug Lederman Articles, Papers, and Reports	Community Recommendation	01/01/2006	2,117
EQM0337	Mitigating Security Issues: The University of Memphis Case Robert Jackson and Mark N. Frolick Articles, Papers, and Reports	EDUCAUSE Quarterly	01/01/2003	4,451
SEC0409	Computer Incident Factor Analysis & Categorization (CIFAC) Project: EDUCAUSE Pilot Virginia Rezmierski, Daniel Rothschild, and Rick Rivas Articles, Papers, and Reports	Security Task Force	01/01/2004	3,666
CSD2728	Partnership for Critical Infrastructure Security Plans and Guidelines	Community Recommendation	01/01/2003	4,328
CSD3490	The World Bank Technology Risk Checklist (Version 7.3) The World Bank Tools	Security Task Force	01/01/2004	2,981
CSD3565	The Security Risk Management Guide Microsoft Articles, Papers, and Reports	Security Task Force	01/01/2004	3,006
CSD4119	Emerging Cybersecurity Issues Threaten Federal Information Systems GAO Articles, Papers, and Reports	Community Recommendation	01/01/2005	3,302
CSD4275	Steps for Managing Risk Samir Kapuria Articles, Papers, and Reports	Community Recommendation	01/01/2005	2,245
CSD2802	CISA Certification Certification, Education, Training and Tutorials	Security Task Force	01/01/2003	3,948
CSD2813	Incident Cost Analysis and Modeling Project (ICAMP) Final Report 1 Committee on Institutional Cooperation (CIC) Security Working Group Articles, Papers, and Reports	Security Task Force	01/01/1998	4,089
CSD2814	Incident Cost Analysis and Modeling Project (ICAMP) Final Report 2 Committee on Institutional Cooperation (CIC) Security Working Group Articles, Papers, and Reports	Security Task Force	01/01/2000	4,210
CSD3520	Business Impact Analysis/Risk Assessment for Information Assets Virginia Tech Tools	Community Recommendation	01/01/2004	3,421
CSD4247	Data Incident Notification Toolkit EDUCAUSE/Internet2 Computer and Network Security Task Force Tools	Higher Education Information Security Council (formerly the Security Task Force)	01/01/2005	2,445
CSD5721	Directions in Security Metrics Research Articles, Papers, and Reports	Community Contributions	08/20/2009	75
CSD5724	Risk Assessment Standards Toolkit: Practical Guidance in Implementing Statements on Auditing Standards 104 Through 111 Articles, Papers, and Reports	Community Contributions	05/21/2009	102
CSD5767	RFP Template for Information Security Projects RFPs		11/10/2009	152

• ‹‹
• 3 of 3
•  

Presentations (75)

Stepping away from the distractions of normal routine to meet with peers, share experiences, and learn together can be invaluable. EDUCAUSE places great emphasis on the face-to-face meeting experience, offering you numerous opportunities throughout the year to gather with colleagues - from small regional events and special topic meetings to large, national conferences covering the full spectrum of roles and issues important to higher education. For more information on EDUCAUSE conferences and seminars, please see our Frequently Asked Questions page. Listed below is the full range of presentations EDUCAUSE and its members tagged with Security Risk Assessment and Analysis

Keywords

• ‹‹
• 3 of 3
•  

Item ID	Title	Resource Category	Pub Date	Views	Ranking
NCP0657	Your Network Security Babelfish Michael Halsall Presentations/Speeches	NERCOMP	03/22/2006	2,404
SEC0404	Effective Security Practices Eoghan Casey and Jack Suess Presentations/Speeches	Mid-Atlantic Regional	01/01/2004	4,203
SPC0403	Securing the Open University Network Environment Kent Knudsen and Jinx P. Walton Presentations/Speeches	Security Professionals Conference	01/01/2004	4,332
SPC0543	Ways to Fit Security Risk Management to Your Environment Using the OCTAVE Methodology Carol Myers, Carol Woody and Javier Torner Presentations/Speeches	Security Professionals Conference	04/03/2005	3,170
SPC0602	Eliminating Spam, Viruses, and Outbound Compliance Risks in the Collegiate IT Environment Sean Wilcox and Sallie Wright Presentations/Speeches	Security Professionals Conference	04/11/2006	2,448
SPC0671	RINGS: Open Source Device Registration and Security Dustin Brown Presentations/Speeches	Security Professionals Conference	04/11/2006	3,391
SPC0672	Security Assessments in an Academic Environment Jon Allen and Robert Paul Hartland Presentations/Speeches	Security Professionals Conference	04/11/2006	2,304
SPC0674	Two Approaches to PCI DSS Compliance Michael Chapple and Jane Drews Presentations/Speeches	Security Professionals Conference	04/11/2006	2,820
SPC0675	Wireless Security Strategies and Challenges David R. Morton Presentations/Speeches	Security Professionals Conference	04/11/2006	2,335
SPC0680	How Secure Is the University? Assessing Institutional IT Risk with Limited Resources Ian D. Waters Presentations/Speeches	Security Professionals Conference	04/11/2006	2,130
SPC0685	Windows Authentication Activity Analysis Kenneth J. Hoover Presentations/Speeches	Security Professionals Conference	04/12/2006	2,375
SPC0695	The Botherd is Coming! How Education and Technology Can Stop the Stampede Justin Azoff and Martin Manjak Presentations/Speeches	Security Professionals Conference	04/11/2006	2,658
WRC0402	Responding to the Changing Security Landscape: It's a New World! Jack McCredie Presentations/Speeches	Western Regional conferences	01/01/2004	4,255
CYB0507	TeraGrid Incident Response Overview James A. Marsteller Presentations/Speeches	Cybersecurity Summit	12/13/2005	2,782
EDU04117	Systemic Barriers to IT Security Clair W. Goldsmith and Lewis Watkins Presentations/Speeches	EDUCAUSE Annual	10/21/2004	3,448
EDU05190	Security Assessments for Information Technology Jon Allen and Robert Paul Hartland Presentations/Speeches	EDUCAUSE Annual	10/20/2005	2,610
EDU05254	A Successful Tool to Create Positive Change: Result of an IT Risk Assessment and Benchmark at Scandinavian Universities Magnar Antonsen, Jonas Everbrand, Johan Lidros, and Jan-Martin Lowendahl Presentations/Speeches	EDUCAUSE Annual	10/21/2005	3,725
MAC0503	Institutional Insurance: Creating a Comprehensive Campus-Wide IT Security Risk Management Program Brian Davis Presentations/Speeches	Mid-Atlantic Regional	01/13/2005	3,078
NMD0417	Panel Discussion Security—Defending Your Customers from Themselves William L. Byers, George Chopin, and James Deaton Presentations/Speeches	Net@EDU (State Networks)	01/01/2004	4,136
SER0565	Lessons Learned in the Establishment of a Vulnerability Assessment Program Mark Newman and James Perry Presentations/Speeches	Southeast Regional	06/08/2005	2,552
WRC0504	Are You Vulnerable? Bill Diamond Presentations/Speeches	Western Regional conferences	04/27/2005	2,873
EDU0460	Centralizing IT Risk Assessment and Measuring Security Policy Compliance Kent Knudsen and Jeffrey C. McCabe Presentations/Speeches	EDUCAUSE Annual	10/20/2004	3,917
LIVE033	IT and Internal Auditing: Developing a Collaborative Approach to IT Security Robert N. Clark, Jr. Presentations/Speeches	Web Seminars EDUCAUSE	01/01/2003	4,504
SPC0507	Spooks in the Machine: Proactive Strategies for Securing Your Network Steven M. Helwig Presentations/Speeches	Security Professionals Conference	04/05/2005	2,922
SEC09_170784	Improving Security Event Correlation and Analysis Using Intelligent Agents Presentations and Seminars	Security Professionals Conference	04/27/2009	227

• ‹‹
• 3 of 3
•  

Policies (1)

Keywords

Item ID	Title	Resource Category	Pub Date	Views	Ranking
CSD4951	IT Risk Methodology & Incident Severity Brian Basgen Policies and Procedures	Community Recommendation	06/11/2007	1,894

Podcasts (8)

Name	Views	Post date
Podcast: The FTC as an Educational Partner in Improving Data Security and Privacy   Play | Show Notes | Download (25.88 MB audio/mpeg)	163	05/19/2008
Podcast: Addressing Complex Security Threats Through Risk Management   Play | Show Notes | Download (27.64 MB audio/mpeg)	432	05/16/2008
E07 Podcast: An Interview with Cedric Bennett - Security Concerns and Risk Management   Play | Show Notes | Download (13.65 MB audio/mpeg)	908	11/01/2007
E07 Podcast: Bruce Schneier on Information Security: Ten Trends   Play | Show Notes | Download (34.17 MB audio/mpeg)	5,693	10/31/2007
2007 Enterprise Conference: The Adaptable University   Play | Show Notes | Download (38.17 MB audio/mpeg)	3,433	06/15/2007
EDUCAUSE2006 Podcast: How to Successfully Defend   Play | Show Notes | Download (33.74 MB audio/mpeg)	3,639	03/31/2007
E2005 Podcast: Security Assessments for Information Technology   Play | Show Notes | Download (24.82 MB audio/mpeg)	4,138	04/05/2006
E2005 Podcast: A Successful Tool to Create Positive Change   Play | Show Notes | Download (24.28 MB audio/mpeg)	3,681	03/28/2006

Blogs (20)

EDUCAUSE hosts a number of blogs for its members. To view a list of all our blogs, click here.

Title	Blogger	Posted	Views
SANS: The Top Cyber Security Risks	Valerie M. Vogel, EDUCAUSE	09/29/2009	91
Tune In July 8: Information Security from the Ground Up	Valerie M. Vogel, EDUCAUSE	07/01/2009	81
ECAR Publishes New Occasional Paper on IT Security Officer Careers	Valerie M. Vogel, EDUCAUSE	07/01/2009	107
Tune In July 8: Information Security from the Ground Up	Peggy Kurkowski, EDUCAUSE	06/30/2009	238
NIST Publishes Final Version of the Guide to Enterprise Telework and Remote Access Security	Valerie M. Vogel, EDUCAUSE	06/16/2009	141
Consensus Audit Guidelines Version 1.0 Released	Valerie M. Vogel, EDUCAUSE	03/24/2009	723
Register Now for the 2009 Security Professionals Conference to Save with Low Rates	Colleen Luckett, EDUCAUSE	02/06/2009	671
Security Task Force 2008–2009 Strategic Plan: "Safeguarding Our IT Assets, Protecting Our Community's Privacy"	Valerie M. Vogel, EDUCAUSE	09/08/2008	368
EDUCAUSE Summit: The Role of IT in Campus Security and Emergency Management	Carie Page, EDUCAUSE	08/15/2008	255
New Risk Assessment Resources Available	Valerie M. Vogel, EDUCAUSE	03/14/2008	343
EDUCAUSE Security Conference: Incident Tracking and Reporting	Lida L. Larsen, EDUCAUSE	04/20/2007	4,942
EDUCAUSE Security Conference: Secrets of Superspies	Lida L. Larsen, EDUCAUSE	04/17/2007	3,657
New Managers Training and Data Security--Two Seminars Coming in June	Colleen Luckett, EDUCAUSE	04/05/2007	3,867
Business Continuity Planning at George Mason University	Valerie M. Vogel, EDUCAUSE	09/13/2006	4,128
Tune In September 6: Going Beyond Recovery to Continuity: Lessons Learned	Colleen Luckett, EDUCAUSE	08/29/2006	3,785
CIFAC Project Final Report (Vol. 2) Released	Valerie M. Vogel, EDUCAUSE	08/18/2006	3,811
Tune In August 2: Trends in Malicious Code on the Internet	Colleen Luckett, EDUCAUSE	07/26/2006	4,506
EDUCAUSE Enterprise 2006. Summary: Enterprise-wide Security	Lida L. Larsen, EDUCAUSE	06/07/2006	3,848
EDUCAUSE Security Professionals Conference 2006. Summary:System-wide Strategies for Achieving IT Security at Univ. of California	Lida L. Larsen, EDUCAUSE	04/25/2006	4,125
Risk Assessment Framework	Valerie M. Vogel, EDUCAUSE	01/09/2006	4,663