-
Research
and PublicationsStay -
Conferences
and EventsAnnual Conference
October 15–18, 2013
Save the date!Events for all Levels and Interests
Whether you're looking for a conference to attend face-to-face to connect with peers, or for an online event for team professional development, see what's upcoming.
Stay -
Career
DevelopmentEDUCAUSE Institute
Leadership/Management Programs
Explore MoreCareer Center
Leadership and Management Programs
EDUCAUSE Institute
Advanced Programs
Project Management
Jump Start Your Career Growth
Explore EDUCAUSE professional development opportunities that match your career aspirations and desired level of time investment through our interactive online guide.
Stay -
Focus Areas
and InitiativesLatest Topics
EDUCAUSE organizes its efforts around three IT Focus Areas
Join These Programs If Your Focus Is
Stay -
Connect
and ContributeFind Others
Get on the Higher Ed IT Map
Employees of EDUCAUSE member institutions and organizations are invited to create individual profiles.
Stay -
About
EDUCAUSEUncommon Thinking for the Common Good™
EDUCAUSE is the foremost community of higher education IT leaders and professionals.
Stay
Subscribe
Filter by Publications
Filter by Presentations
Filter by Library Taxonomy
- Policy and Law [x]
- Cybersecurity (60)
- Security Management (51)
- Federal Policy and Law (46)
- Cybersecurity Policy (34)
- Campus Policy and Law (31)
- Campus Policies (29)
- Information Technology Management and Leadership (21)
- Security Policies (21)
- Data Security (19)
- Security Planning (17)
- PCI DSS (12)
- Network Security and Applications (11)
- Federal Privacy Law (10)
- Compliance (8)
- Incident Handling and Response (8)
- Security Awareness (7)
- Security Implementation (7)
- Privacy (6)
- Policy Development (5)
Information technology policy is impacted by a wide range of perspectives from international, national, state, and campus levels. This resource page underscores the connections among these different levels and how international organizations, Congress, federal agencies, state governments, and the courts all play a role in shaping IT policy and law, as well as why this matters to higher education. Campus policies, whether developed to comply with legal mandates or to formalize institutional norms and processes, are under constant development and review as a result of changes precipitated by the introduction of new information technologies.
Featured Resources
Latest News
PCI compliance, privacy, InCommon implementation, and legal issues in IT are just a few of the preconference seminar topics offered at the EDUCAUSE Annual Conference, November 6-9 in Denver....
Library Items on this Topic
EDUCAUSE Library Items for Policy and Law
-
Managing Risk and Compliance by Implementing DLP to Ensure Data Security
-
April 16, 2013
|
A session at the Security Professionals Conference
Did a university e-mail contain employee PII data? Did we just FTP a file that contains alumni PCI data? In this seminar, you will learn how Saint Louis University increased its ability to prevent …
-
Cyber War: You're Doing It Wrong! - Sponsored by Aegis Identity Software
-
April 16, 2013
|
A session at the Security Professionals Conference
No matter how you slice it, cyber war is technologically and militarily impractical. We've been talking about it for a long time, but the discussion has been (and still is) misleading and inac…
-
Creating an IT Security Baseline
-
April 16, 2013
|
A session at the Security Professionals Conference
The UW–Madison Office of Campus Information Security has worked with the campus community to develop a baseline information systems security standard that's intended to help departments on c…
-
Providing Private Cloud Services to Support HIPAA Compliance
-
April 17, 2013
|
A session at the Enterprise IT Leadership Conference 2013
HIPAA and HIPAA HITECH legislation requires our institutions to protect Electronic Personal Health Information (EPHI). University departments in the health sciences clearly have teaching, researc…
-
A Practitioner's Approach for Developing Information Security Policy
-
April 17, 2013
|
A session at the Enterprise IT Leadership Conference 2013
An institution developing its information security policy by basing it on lofty ideals and stringent standards may demand far more than its staff is capable of delivering, which risks frustrating s…
-
A Practitioner's Approach for Developing Information Security Policy
-
April 17, 2013
|
A session at the Security Professionals Conference
An institution developing its information security policy by basing it on lofty ideals and stringent standards may demand far more than its staff is capable of delivering, which risks frustrating s…
-
The Enemy Is Us: Doing the Work of Information Security Better
-
April 17, 2013
|
A session at the Security Professionals Conference
Within information security departments, staff often get so bogged down in "getting the job done" that they can never assess how they are doing their job and whether they can do anything …
-
IT Compliance Framework for Institutions of Higher Ed
-
April 16, 2013
|
A session at the Security Professionals Conference
Institutions of higher education are increasingly expected to comply with various regulatory requirements specifically focused at data privacy and protection. Sometimes there could be overlap in ef…
-
26 of 1: Compliance with the Red Flags Rule in Higher Education
-
April 16, 2013
|
A session at the Security Professionals Conference
Compliance with financial regulations in higher education, especially the Red Flags Rule, is as complex as it gets; it is a regulation with elusive requirements. Join two university privacy officer…
-
Keynote: The EDUCAUSE Policy Program: From Congress to Campus
-
July 19, 2012
|
A session at the Campus IT Policy Workshop 2012
July 19, 2012 CAMPIT12_249132 …

















