Incident Handling and Response

EDUCAUSE Library Items for Incident Handling and Response

Baylor University's IT Security Risk Assessment Program

October 12, 2006

This case study examines Baylor University's risk assessment program for information technology security, which was established in the face of the escalating demands that security places on …

CBO Perspectives on IT and Business Continuity

September 25, 2006

This September-October 2006 survey, administered to chief business officers and chief financial officers affiliated with the National Association of College and University Business Officers (NACU…

Computer Incident Factor Analysis and Categorization (CIFAC) Project Final Report, Volume II: Corporate and Not-for-Profit Sample

January 1, 2006

The Computer Incident Factor Analysis and Categorization (CIFAC) project received supplemental supportfrom the National Science Foundation in late 2005, making it possible to expand the scope of th…

Campus IT Security: Governance, Strategy, Policy, and Enforcement

August 15, 2006

Successful implementation of an effective information, data, and system "security blanket" for higher education institutions requires recognition of and action upon the cultural, politi…

Trends in Malicious Code on the Internet

January 1, 2006

The presentation will identify the FBI's role in combating malicious code outbreaks and investigating computer intrusion incidents, as well as the objectives of malware analysis. The malicio…

Policy and Regulatory Issues

May 24, 2006 | A session at the Enterprise Technology Conference 2006

This session will focus on information security programs inclusive of policy, risk assessment, operational practices, education, training, and enforcement for the proper handling, preservation, and…

Incident Response at UT Austin

January 1, 2006

An interview with VP for IT Dan Updegrove. The recent break-in to an administrative database at the McCombs School of Business at UT Austin (TX), discovered April 21, 2006, may have compromised the…

Data Security and Incident Notification

April 26, 2006

As data security breaches at colleges and universities continue to mount, government mandates for incident notification are emerging at the state level, and Congress is considering several proposal…

Staying Out of the Security Headlines

April 12, 2006 | A session at the Security 2006

In the first half of last year 550,000 people associated with 16+ schools had personal information exposed in university security breaches, generating negative publicity for the universities concer…

Incident Handling: Event Correlation, Response, Reporting, and Planning

April 12, 2006 | A session at the Security 2006

This session will describe the centralized system for event correlation and automated incident response (CECR) used by York University. There will also be a section on the use of incident reporting…