Information Security from the Ground Up

In 2005 the University of Notre Dame suffered a serious incident that brought information security into the campus spotlight. In response, we partnered with a Big Four consulting firm to conduct a comprehensive IT risk assessment. Three years later, we're almost done with a four-year risk management program. This talk will cover the reasons for the program, how it was designed, what went into it, and how we have succeeded, as well as what we have learned during this ground-up security redesign.