IT Governance When You Have NOT Been Breached

Montgomery College has never suffered a serious information security breach. While this nonevent should be celebrated, it also creates a credibility gap when trying to engage college executive leadership as a partner in the securing of college information. Security professionals want a serious program of information security and are sometimes stymied by not being taken seriously without an incident having occurred. Closing the gap without an incident takes persistence, education, and a plan. This session looks at one college's emerging effort in closing this gap. Come share your own successes and failures.