Main Nav

Efforts to Improve Cybersecurity as a Liability

Congressman Adam Putnam (R.-Fla), commenting upon some of the dialogue between members of his Corporate Information Security Working Group, also had the following to say in his opening statement during the cybersecurity and identity theft hearing:

I am simply tired of hearing that lawyers are advising against the adoption and implementation of cyber security best practices or online privacy policies because they are afraid that they may be creating liability.  My friends…in my estimation, a failure to aggressively address these issues may in and of itself be creating that liability.  While I am not a lawyer, I am a businessman…I am a taxpayer…and I am an involved citizen.  This issue is about national security and economic stability along with sound business practices and deserves your immediate attention.

His sentiments are probably shared by most corporate executives and leaders within the higher education community.  However, corporate counsel, many of which don’t understand information technology, are taking very conservative legal positions that may be harmful in the long-term. 

As many commentators have pointed out, even without security legislation, courts are likely to hold businesses and institutions of higher education to a “standard of care” that is appropriate for the industry.  Additionally, if organizations continue to refuse to take voluntary steps to improve security because of fear of legal liability, we can expect legislators or regulators to step in and create the standard and to devise new forms of liability or accountability.

Colleges and universities may be inclined to put up similar “legal fences” or claim that the “academic culture” will not permit the pursuance of best practices.  Recognizing the legal, political, and cultural tensions that many CIO’s and CISO’s would face, the Security Task Force has developed Principles to Guide Efforts to Improve Computer and Network Security for Higher Education that I would urge institutions of higher education to consider.

Tags from the EDUCAUSE Library


Connect: San Antonio
April 22–24
Register Now

Events for all Levels and Interests

Whether you're looking for a conference to attend face-to-face to connect with peers, or for an online event for team professional development, see what's upcoming.


Digital Badges
Member recognition effort
Earn yours >

Career Center

Leadership and Management Programs

EDUCAUSE Institute
Project Management



Jump Start Your Career Growth

Explore EDUCAUSE professional development opportunities that match your career aspirations and desired level of time investment through our interactive online guide.


EDUCAUSE organizes its efforts around three IT Focus Areas



Join These Programs If Your Focus Is


Get on the Higher Ed IT Map

Employees of EDUCAUSE member institutions and organizations are invited to create individual profiles.



2015 Strategic Priorities

  • Building the Profession
  • IT as a Game Changer
  • Foundations

Learn More >

Uncommon Thinking for the Common Good™

EDUCAUSE is the foremost community of higher education IT leaders and professionals.