Security Risk Assessment and Analysis - 173 Resources

Overview

Assessment is an estimate of the harm to business likely to result from a security failure and the likelihood of such a failure occuring, given the threat environment and the measures in place to prevent a failure. Risk Analysis is the process of indentifying an organization's information resources, existing controls, security risks, and vulnerabilities; determining their magnitude; and indentifying areas needing safeguards. It establishes a potential level of damage in dollars and/or other assets.

Publications (70)

EDUCAUSE publications address a diverse range of professional challenges in higher education IT, from updates on current developments to explorations of important overarching issues. Listed below are the full range of research, reports and other publications that EDUCAUSE and its members have written about Security Risk Assessment and Analysis.

Keywords

•  
• 1 of 3
• ››

Item ID	Title	Resource Category	Pub Date	Views	Ranking
CSD5144	Incident Management Capability Metrics Certification, Education, Training and Tutorials		09/19/2007	2,563
CSD5586	Information Technology Security Risk Management (ITS-RM) Program Programs and Projects		12/12/2008	719
LIVE0912	Information Security from the Ground Up David Seidl		07/08/2009	227
CSD5767	RFP Template for Information Security Projects RFPs		11/10/2009	148
EPS301	Whole Disk Encryption Evaluation and Deployment Jon Allen and Adam Sealey Effective Practices	Community Contributions	10/02/2008	517
CSD5721	Directions in Security Metrics Research Articles, Papers, and Reports	Community Contributions	08/20/2009	75
CSD5724	Risk Assessment Standards Toolkit: Practical Guidance in Implementing Statements on Auditing Standards 104 Through 111 Articles, Papers, and Reports	Community Contributions	05/21/2009	98
CSD5737	Information Technology Sector Baseline Risk Assessment Government Documents, Laws, Testimonies or Reports	Community Contributions	08/28/2009	105
ECM0606	Safeguarding the Tower: IT Security in Higher Education 2006 Roadmap Robert B. Kvavik Articles, Papers, and Reports	ECAR	10/12/2006	2,559
ECS0606	Most Improved: How Four Institutions Developed Successful IT Security Programs Judith A. Pirani and Donald Z. Spicer Articles, Papers, and Reports	ECAR	11/03/2006	2,897
EKF0606	Safeguarding the Tower: IT Security in Higher Education 2006 – Key Findings Judith Borreson Caruso Articles, Papers, and Reports	ECAR	10/12/2006	2,474
ERB0607	Surveying the Steps to a Secure Emory University Jay D. Flanagan Articles, Papers, and Reports	ECAR	03/28/2006	3,987
ERB0624	Local IT Security for Colleges, Schools, and Departments: A Higher Education Perspective Derek Spransy Articles, Papers, and Reports	ECAR	12/05/2006	2,859
ERS0505	A Systematic, Comprehensive Approach to Information Security Dan Blum, with input from Fred Cohen Articles, Papers, and Reports	ECAR	07/06/2005	4,866
ERS0601	Making Business Sense of Information Security Dan Blum Articles, Papers, and Reports	ECAR	03/21/2006	4,136
ESI06A	CHEMA Looks at the Future of Higher Education, 2006 ECAR Surveys	ECAR	01/30/2006	2,602
ESI08B	IT Security Officer Survey Marilu Goodyear Surveys	ECAR	04/09/2008	1,726
ERB0817	Information Security Governance: Standardizing the Practice of Information Security Tammy L. Clark and Toby D. Sitko Articles, Papers, and Reports	ECAR	08/19/2008	6,635
CSD2602	security.vt.edu Certification, Education, Training and Tutorials	Community Recommendation	01/01/2002	4,685
CSD2728	Partnership for Critical Infrastructure Security Plans and Guidelines	Community Recommendation	01/01/2003	4,328
CSD3520	Business Impact Analysis/Risk Assessment for Information Assets Virginia Tech Tools	Community Recommendation	01/01/2004	3,421
CSD4119	Emerging Cybersecurity Issues Threaten Federal Information Systems GAO Articles, Papers, and Reports	Community Recommendation	01/01/2005	3,302
CSD4275	Steps for Managing Risk Samir Kapuria Articles, Papers, and Reports	Community Recommendation	01/01/2005	2,245
CSD4298	The Lasting Impact of Sony's Rootkit Michael A. Geist Blogs	Community Recommendation	01/01/2005	2,305
CSD4299	Signaling Vulnerabilities in Wiretapping Systems Micah Sherr, Eric Cronin, Sandy Clark and Matt Blaze Articles, Papers, and Reports	Community Recommendation	01/01/2005	2,312

•  
• 1 of 3
• ››

Presentations (75)

Stepping away from the distractions of normal routine to meet with peers, share experiences, and learn together can be invaluable. EDUCAUSE places great emphasis on the face-to-face meeting experience, offering you numerous opportunities throughout the year to gather with colleagues - from small regional events and special topic meetings to large, national conferences covering the full spectrum of roles and issues important to higher education. For more information on EDUCAUSE conferences and seminars, please see our Frequently Asked Questions page. Listed below is the full range of presentations EDUCAUSE and its members tagged with Security Risk Assessment and Analysis

Keywords

•  
• 1 of 3
• ››

Item ID	Title	Resource Category	Pub Date	Views	Ranking
ECR0605	Safeguarding the Tower: IT Security in Higher Education 2006 Robert B. Kvavik and John Voloudakis Presentations/Speeches	ECAR	10/11/2006	2,403
CYB0507	TeraGrid Incident Response Overview James A. Marsteller Presentations/Speeches	Cybersecurity Summit	12/13/2005	2,782
CYB07007	Information Systems Under Attack: Managing Enterprise Risk Ronald Ross Presentations/Speeches	Cybersecurity Summit	02/22/2007	2,554
CYB09_179766	Intrusion Detection: Getting to Know Bro Presentations and Seminars	Cybersecurity Summit	09/14/2009	75
EDU0312	Information Security Risk Evaluation for Colleges and Universities Christopher Alberts and Carol Woody Presentations/Speeches	EDUCAUSE Annual	01/01/2003	4,887
EDU03136	Defining Risk and Fixing the Top 20: Security 101 for a Small School John Bruggeman Presentations/Speeches	EDUCAUSE Annual	01/01/2003	4,793
EDU04117	Systemic Barriers to IT Security Clair W. Goldsmith and Lewis Watkins Presentations/Speeches	EDUCAUSE Annual	10/21/2004	3,448
EDU0460	Centralizing IT Risk Assessment and Measuring Security Policy Compliance Kent Knudsen and Jeffrey C. McCabe Presentations/Speeches	EDUCAUSE Annual	10/20/2004	3,917
EDU05190	Security Assessments for Information Technology Jon Allen and Robert Paul Hartland Presentations/Speeches	EDUCAUSE Annual	10/20/2005	2,610
EDU05254	A Successful Tool to Create Positive Change: Result of an IT Risk Assessment and Benchmark at Scandinavian Universities Magnar Antonsen, Jonas Everbrand, Johan Lidros, and Jan-Martin Lowendahl Presentations/Speeches	EDUCAUSE Annual	10/21/2005	3,725
EDU06165	Effective IT Security Practices John Bruggeman, H. Morrow Long, and Christopher Misra Presentations/Speeches	EDUCAUSE Annual	10/09/2006	3,113
EDU06286	IT Security in Higher Education: A Sea Change Robert B. Kvavik and John Voloudakis Presentations/Speeches	EDUCAUSE Annual	10/11/2006	1,943
EDU07210	Stop, Drop, and Roll: Prevent and Douse Cyber Incidents Cedric Bennett, Susan A. Blair, and Kathleen Roberts Presentations/Speeches	EDUCAUSE Annual	10/23/2007	731
EDU07237	GSU's Roadmap for a World-Class Information Security Management System: ISO 27001:2005 Tammy L. Clark and William Monahan Presentations/Speeches	EDUCAUSE Annual	10/23/2007	1,313
EDU07330	Lassoing the Beast: How a Large, Diverse University Is Wrapping Its Arms Around Confidential Data Donna M. Milici, Jim Cunningham, and Maura Johnston Presentations/Speeches	EDUCAUSE Annual	10/23/2007	640
E08_47642	Security and Privacy Lightning Round Christopher Keslar, Michael A. Corn, Ryan Turner, Matt Tolbert, Chandragupta Gudena, David Stack, and Jamey Hansen Presentations/Speeches	EDUCAUSE Annual	10/30/2008	688
E08_177997	Using Nontraditional Security Risk Assessments to Clearly Express Risk, Make Persuasive Budget Requests, and Showcase Positive Trends Presentations and Seminars	EDUCAUSE Annual	10/30/2008	41
EAF0619	Credentialing, Levels of Assurance, and Risk: What's Good Enough? Michael Conlon and R.L. Morgan Presentations/Speeches	EDUCAUSE Grant Programs (CAMP)	02/09/2006	2,730
CAMP08115	Appropriate Access: Levels of Assurance Stefan Wahe and David L. Wasley Presentations/Speeches	EDUCAUSE Grant Programs (CAMP)	02/13/2008	766
MAC0337	Creating a Secure University: Technology, Policies, Education, and Culture Joy R. Hughes and Randy Marchany Presentations/Speeches	Mid-Atlantic Regional	01/01/2003	6,254
MAC0503	Institutional Insurance: Creating a Comprehensive Campus-Wide IT Security Risk Management Program Brian Davis Presentations/Speeches	Mid-Atlantic Regional	01/13/2005	3,078
SEC0404	Effective Security Practices Eoghan Casey and Jack Suess Presentations/Speeches	Mid-Atlantic Regional	01/01/2004	4,203
MARC09_48024	Performing Risk Analysis and Testing: Outsource or In-House? A Towson University Case Study Lynn Ray Presentations/Speeches	Mid-Atlantic Regional	01/07/2009	420
MWR0654	Risk Assessment 101 Kelley L. Bradder Presentations/Speeches	Midwest Regional	03/13/2006	2,516
MWR0675	RINGS Open Source Device Registration and Security Dustin Brown Presentations/Speeches	Midwest Regional	03/14/2006	2,401

•  
• 1 of 3
• ››

Policies (1)

Keywords

Item ID	Title	Resource Category	Pub Date	Views	Ranking
CSD4951	IT Risk Methodology & Incident Severity Brian Basgen Policies and Procedures	Community Recommendation	06/11/2007	1,894

Podcasts (8)

Blogs (20)

EDUCAUSE hosts a number of blogs for its members. To view a list of all our blogs, click here.