Cybersecurity

Main Nav

Introduction

The higher education sector plays an important role in the cybersecurity of America. Through its core mission of teaching and learning, higher education is the main source of future leaders, innovators, and the technical workforce. Through research, higher education is the basic source of much of our new knowledge and future technologies. Colleges and universities also operate some of the world's largest collections of computers and high-speed networks. This resource page provides information related to all aspects of cybersecurity for higher education, with an emphasis on strategies, policies, and other tools that will assist institutions of higher education to prevent, detect, and respond to vulnerabilities that threaten college and university computers and networks.

EDUCAUSE is actively involved with this area through the EDUCAUSE/Internet2 Higher Education Information Security Council (formerly the Security Task Force).

Information Security Guide: Effective Practices and Solutions for Higher Education

The Information Security Guide: Effective Practices and Solutions for Higher Education is now available in wiki format. This resource provides practical approaches to preventing, detecting, and responding to security problems in a wide range of higher education environments. This online service is designed with colleges and universities in mind, balancing our need for security with the need for an open, collaborative networking environment. Also, because one of the overarching concerns in college and university information technology (IT) departments is a lack of resources, an effort is made to provide low-cost solutions. The target audiences are those responsible for information security in colleges and universities and information technology staff who implement and manage security measures. Recognizing that many institutions have initiated or are in the process of developing IT security programs and policies, an effort is made throughout this resource to present practices that are useful at each stage of the developmental process.

As a community-driven, community-serving project, it is important for this initiative to incorporate experiences and perspectives from many different institutions. To contribute case studies that have been effective in your institution, please contact security-council@educause.edu.

Events Calendar

View past and future security-related events.

Latest News

Five Pilot Projects Receive Grants to Promote Online Security and Privacy

InCommon will be heavily involved in a $1.8 million grant awarded to Internet2 to build a consistent and robust privacy infrastructure. Partners include Carnegie Mellon, Brown, University of Texas...

Virginia Tech First to Achieve Bronze and Silver Assurance

Virginia Tech has become the first identity provider to achieve Bronze and Silver certification as part of the InCommon Assurance Program.

Recommended IAM Sessions at EDUCAUSE 2012

The annual EDUCAUSE Conference in Denver will provide an opportunity to explore the range and depth of issues that campuses must consider as they build...

Recommended Security & Privacy Sessions at EDUCAUSE 2012

Find a variety of E12 security and privacy-related sessions in Denver or online.

National Cyber Security Awareness Month 2012 is HERE!

Find resources and see what other campuses are doing this October for NCSAM.

Policy Matters NCSAM Article (Sep/Oct 2012)

NCSAM article in the latest EDUCAUSE Review offers resources and suggestions for campuses to support security awareness efforts in October.

Library Items on this Topic

View All

EDUCAUSE Library Items for Cybersecurity

Showing 1 - 10 of 30 Results

Sort by:

Relevancy | Title | Date

Paper Is Out, Online Form Development Tools Are In: March 19, 2013 | A session at the Midwest Regional Conference
Campus departments are looking to move their paper forms online. Many options exist for cloud no-code online forms development tools. Add this to existing enterprise solutions with online form and …
Innovation Showcase: March 19, 2013 | A session at the Midwest Regional Conference
Beyond "Angry Birds": Taking Your iPad to the Next Level Far from being just a media consumption device, the iPad and its integration into both popular and academic culture have led …
Taking Employee E-Mail to the Cloud with Office 365: January 16, 2013 | A session at the Mid-Atlantic Regional Conference
Prince George's Community College (PGCC) began an E-Mail Migration Project in spring 2012 to move employee e-mail from Novell GroupWise to Exchange/Outlook in the cloud (Microsoft Office 365…
Leverage the Cloud + Leverage In-House + Improve Security = Save Money: January 11, 2012 | A session at the Mid-Atlantic Regional Conference 2012
The University of Maryland in Baltimore had to replace its in-house student e-mail system. Our students wanted Google. We had concerns with security as well as compliance requirements such as HIPAA…
The Law and the Cloud: Accountability and Empowerment in the New Computing: January 11, 2012 | A session at the Mid-Atlantic Regional Conference 2012
Click-through and shrink-wrap license agreements. Terms of use and privacy disclosures. Data mining, HIPAA, FERPA, e-discovery, FOIA, and intellectual property rights. The cloud and web services ar…
Building a Self-Audit, Advising, and Community Tool Using WordPress: March 30, 2011 | A session at the NERCOMP Annual Conference 2011
Educational Technology used WordPress with the BuddyPress plug-in for rapid development of a self-audit tool for English majors that also implemented some community features via optional sharing of…
Proactive Compliance Through Information Systems Risk Management: January 12, 2011 | A session at the Mid-Atlantic Regional Conference 2011
Moving compliance from a reactive approach to a proactive approach does not occur overnight. It is a journey with many opportunities for failure or success. Compliance can be obtained proactively…
Creating an Information Security Program: Policy, Process, and Cultural Change: March 10, 2010 | A session at the NERCOMP Annual Conference 2010
Complying with state and federal regulations regarding personal information and data breaches is both a challenge and a concern for many universities. This session will review how two different i…
Building a Standards-Based Information Security Program: March 24, 2009 | A session at the EDUCAUSE Midwest Regional Conference 2009
Safeguarding IT assets and protecting community members' privacy is an important goal for colleges and universities. IT organizations play an important leadership role as information is increa…
Performing Risk Analysis and Testing: Outsource or In-House? A Towson University Case Study: January 7, 2009 | A session at the EDUCAUSE Mid-Atlantic Regional Conference 2009
To ensure that institutional systems are secure and meet payment card industry requirements, managers must perform regular risk tests on various systems across campus. When we lost our security eng…

Main Nav

Publications

Research

Major Conferences

Online Events

Special Topic Events

Events for all Levels and Interests

Career Center

Leadership and Management Programs

Fellowships and Awards

Getting Involved

Jump Start Your Career Growth

Latest Topics

EDUCAUSE organizes its efforts around three IT Focus Areas

Join These Programs If Your Focus Is

From the Blogs

Find Others

Share Ideas

Get on the Higher Ed IT Map

2013 Strategic Priorities

Membership

Who We Are

Stay Informed

Uncommon Thinking for the Common Good™

< EDUCAUSE Library

Subscribe

Browse this Topic

Refine Topic...

Your Selections Under:

Related Topics

Filter by type

Filter by Presentations

Filter by Library Taxonomy