Research Publications

After two years of rapid and disruptive change in the identity market, 2012 promises even more of the same. Intensifying policy battles, increased levels of fraud and privacy intrusion, continui…

This research bulletin describes a functional framework for higher education compliance with the HIPAA IT security final rule. The framework, which can be adapted for individual universities, inc…

Information security is a process of business risk management that must be performed on an ongoing basis. It is critical to take an approach to information security that examines the risks and s…

This ECAR research bulletin discusses how the University of Notre Dame created and refined its incident response plan, how the utility tunnel fire of August 28, 2009, played out within that fram…

This case study examines Baylor University's risk assessment program for information technology security, which was established in the face of the escalating demands that security places on …

Successful implementation of an effective information, data, and system "security blanket" for higher education institutions requires recognition of and action upon the cultural, politi…

This bulletin is a companion to Campus IT Security: Governance, Strategy, Policy, and Enforcement, ECAR's 2006 bulletin (No. 17) by the same authors. Security technologies provide various ty…

This September-October 2006 survey, administered to chief business officers and chief financial officers affiliated with the National Association of College and University Business Officers (NACU…

This ECAR research bulletin suggests a framework to provide resiliency in higher education by placing such considerations up front in the evaluation, selection, and design of information technolo…