Active Learning

EDUCAUSE Library Items for Active Learning

Implementing Information Security Governance Using ISO 27000

March 17, 2011

GSU's CIO sponsored the ISO 27001 certification initiative at Georgia State University in mid 2007 and the Information Security Department and Office of Disbursements were the first GSU depa…

Georgia State University's IT Procurement Review Process--Practical Approach to Assessing Risks of IT Projects

March 17, 2011

In late 2005, the Security Review Policy was adopted by the University, which states "Where appropriate, information security personnel will conduct risk assessments of technologies/processe…

Whole Disk Encryption Evaluation and Deployment

October 2, 2008

Baylor University has spent two years working on a large-scale deployment of whole-disk encryption. Baylor University has spent two years working…

Lessons Learned from RIT’s First Security Posture Assessment

January 1, 2004

Rochester Institute of Technology (RIT) is the 11th largest private university in the United States with approximately 22,500 hosts on our network. We have one of the largest computer science and…

Five-Year Rotating Audit Focus Based on Risk Assessment at Georgia Tech

January 1, 2004

Georgia Tech operates one of the most complex networks in the world. The institute has more than 30,000 machines accessing the backbone daily. Most legacy, state-of-the-market, and state-of-the-a…

HIPAA Security Assessment

January 1, 2004

The Indiana University-Purdue University Indianapolis (IUPUI) assessment tool was developed based on initial work by the North Carolina Health and Human Services (NCHHS) office. The NCHHS HIPAA S…

E-Commerce and the Cardholder Information Security Program (CISP)

January 1, 2005

This submission provides basic information important for universities that sell products or services online and collect fees via credit card. The approach is meant to help institutions of higher …