Building an Information Security Practice
| Title: | Building an Information Security Practice (ID: EPS145) | | Author(s): | Glenn C. Hill (Northeastern University) | | Topics: | Security Awareness, Security Management, Security Planning, Security Risk Assessment and Analysis | | Origin: | Community Contributions (2003) | | Type: | Effective Practices | | Abstract: | Northeastern University, not unlike other academic institutions, faces unique challenges in protecting the information assets of the community. Compelling issues include managing: - Vast amounts of information - An open environment - Decentralized functions - Customer and community expectations for safe and secure handling of data - Institutional responsibility - Financial, operational, and reputational risks - An increasing threat profile - Expanding electronic services use
Knowing what's important is essential, as is seeking the right balance of controlling access and use while avoiding interference with learning and business processes. This practice describes key concepts and recommendations for building an information security practice in the higher education environment.
| | View this resource: | |
|