-
Research
and PublicationsStay -
Conferences
and EventsAnnual Conference
October 15–18, 2013
Save the date!Events for all Levels and Interests
Whether you're looking for a conference to attend face-to-face to connect with peers, or for an online event for team professional development, see what's upcoming.
Stay -
Career
DevelopmentEDUCAUSE Institute
Leadership/Management Programs
Explore MoreCareer Center
Leadership and Management Programs
EDUCAUSE Institute
Advanced Programs
Project Management
Jump Start Your Career Growth
Explore EDUCAUSE professional development opportunities that match your career aspirations and desired level of time investment through our interactive online guide.
Stay -
Focus Areas
and InitiativesLatest Topics
EDUCAUSE organizes its efforts around three IT Focus Areas
Join These Programs If Your Focus Is
Stay -
Connect
and ContributeFind Others
Get on the Higher Ed IT Map
Employees of EDUCAUSE member institutions and organizations are invited to create individual profiles.
Stay -
About
EDUCAUSEUncommon Thinking for the Common Good™
EDUCAUSE is the foremost community of higher education IT leaders and professionals.
Stay
Filter by type
Filter by Publications
Filter by Presentations
Filter by Library Taxonomy
- Campus Policy and Law [x]
- Cybersecurity Policy [x]
- Security Management [x]
- Campus Policies (34)
- Cybersecurity (34)
- Federal Policy and Law (34)
- Policy and Law (34)
- Security Policies (27)
- Data Security (14)
- Incident Handling and Response (12)
- Information Technology Management and Leadership (12)
- IT Governance (8)
- Institutional Management (8)
- Security Planning (7)
- PCI DSS (6)
- Privacy Policies (6)
- Privacy (6)
- Data Classification Policies (5)
- Network Security and Applications (5)
- Security Risk Assessment and Analysis (5)
EDUCAUSE Library Items for Cybersecurity Policy
-
Information Security Program Assessment Tool
-
April 15, 2013
This self-assessment tool was created to evaluate the maturity of higher education information security programs using as a framework the International Organization for Standardization (ISO) 2700…
-
Security for Mobile Computing and Storage Device Policy
-
April 6, 2011
This Security for Mobile Computing and Storage Device Policy within the Connecticut Community Colleges (“CCC”) is established to ensure the security of Protected Confidential Information (…
-
NDSU Guidelines for Protecting Sensitive Data
-
September 3, 2010
This NDSU website includes important information for NDSU employees to follow when dealing with personal and confidential data. This NDSU website…
-
Navigating the Web of Regulated Data
-
January 14, 2010
|
A session at the EDUCAUSE Mid-Atlantic Regional Conference 2010
In response to the data breach of over 38,000 Social Security numbers in January 2008, Georgetown University Information Services initiated a university-wide data inventory and campaign to address …
-
Ferreting Out Sensitive Data
-
March 10, 2009
|
A session at the NERCOMP Annual Conference 2009
FERPA, HIPAA, and red flag rules: we're swimming in an alphabet soup of federal regulations related to information privacy and prevention of identity theft. Learn how MIT approached the proble…
-
Standards for Security Categorization of Federal Information and Information Systems (FIPS-199)
-
February 18, 2004
The E-Government Act of 2002 (Public Law 107-347), recognized the importance of information security to the economic and national security interests of the United States. Title III of the E-Gove…
-
Final Report of the 2007 Cybersecurity Summit
-
November 30, 2007
This is the final report for the 2007 NSF Cybersecurity Summit, held February 22 & 23rd, 2007, in Arlington, VA. This is the final report fo…
-
Secure Data Exchange
-
October 25, 2007
|
A session at the EDUCAUSE 2007 Annual Conference
How do you know that your data exchange is secure? Our campuses exchange data daily, much of it critical and confidential. Is your banking relationship supporting secure data exchange? How secure a…
-
Policy Coverage Matrix for Payment Card Industry
-
August 13, 2007
This table provides a high-level mapping between the security requirements of the Payment Card Industry Data Security Standard and the information security policies found within ISPME V10. ISPME…
-
Duke University: The Payment Card Industry (PCI) Data Security Standard
-
August 1, 2007
This document outlines Duke University's expectations of departments accepting credit card payments as related to the Payment Card Industry Data Security Standard (http://www.visa.com/cisp),…

















