-
Research
and PublicationsStay -
Conferences
and EventsAnnual Conference
October 15–18, 2013
Save the date!Events for all Levels and Interests
Whether you're looking for a conference to attend face-to-face to connect with peers, or for an online event for team professional development, see what's upcoming.
Stay -
Career
DevelopmentEDUCAUSE Institute
Leadership/Management Programs
Explore MoreCareer Center
Leadership and Management Programs
EDUCAUSE Institute
Advanced Programs
Project Management
Jump Start Your Career Growth
Explore EDUCAUSE professional development opportunities that match your career aspirations and desired level of time investment through our interactive online guide.
Stay -
Focus Areas
and InitiativesLatest Topics
EDUCAUSE organizes its efforts around three IT Focus Areas
Join These Programs If Your Focus Is
Stay -
Connect
and ContributeFind Others
Get on the Higher Ed IT Map
Employees of EDUCAUSE member institutions and organizations are invited to create individual profiles.
Stay -
About
EDUCAUSEUncommon Thinking for the Common Good™
EDUCAUSE is the foremost community of higher education IT leaders and professionals.
Stay
Subscribe
Filter by type
Filter by Publications
Filter by Presentations
Filter by Library Taxonomy
- Campus Policy and Law [x]
- Policy and Law (52)
- Campus Policies (46)
- Information Technology Management and Leadership (36)
- Cybersecurity (29)
- Security Management (29)
- Security Policies (27)
- Federal Policy and Law (26)
- IT Governance (20)
- Institutional Management (20)
- Incident Handling and Response (16)
- Networking and Emerging Technologies (14)
- Security Risk Assessment and Analysis (12)
- Cybersecurity Policy (11)
- Information Systems and Services (11)
- Network Security and Applications (10)
- Identity and Access Management (8)
- Policy Development (8)
- Copyright and Intellectual Property Policies (7)
- Intellectual Property (7)
Introduction
Awareness and training are critical at all stages and levels of information security. For example, upper management needs to learn about the institutional risks; users must be taught how to defend themselves against malicious code; system and network administrators require training to help them maintain and improve the security of the systems they oversee; and information security support staff must be well-versed in all of these areas and have a solid understanding of vulnerability assessment, intrusion detection, incident response, encryption, and authentication.
Resources Developed by the Higher Education Information Security Council (HEISC)
- Cybersecurity Awareness Resource Library
- Executive Security Awareness Resources
- Information Security Poster & Video Contest
- National Cybersecurity Awareness Month (NCSAM) Resource Kit
- National Cybersecurity Awareness Month (NCSAM) Sample Kit
- Security Awareness Quick Start Guide
- Security Awareness Detailed Instruction Manual
College and University Education and Awareness Programs and Resources
- Carnegie Mellon University Software Engineering Institute (SEI) CERT Coordination Center Resources for CSIRTs (Computer Security Incident Response Teams)
- George Mason University Security Awareness
- North Dakota State University ITS Training
- Rochester Institute of Technology Digital Self Defense Training
- Texas A&M University Security Awareness Training
- University of Arizona Information Security Awareness, Education, and Training
- University of Calgary Security Awareness Program
- University of Virginia Security Awareness
- Virginia Tech Awareness Training
Updated October 2012
Latest News
Find resources and see what other campuses are doing this October for NCSAM.
NCSAM article in the latest EDUCAUSE Review offers resources and suggestions for campuses to support security awareness efforts in October.
Library Items on this Topic
EDUCAUSE Library Items for Security Awareness
-
Protecting the Security of Research Data
-
November 8, 2011
The effective protection and management of research data has become a hot topic in U.S. higher education. Funding agencies increasingly require data management plans as part of grant submittals…
-
Does Higher Education Need a New Ethical Framework for the Internet?
-
March 22, 2011
This ECAR research bulletin is designed to help decision makers in higher education assess the applicability of four significant historical codes of ethics as they evaluate their current polic…
-
Intellectual Property Policies, E-Learning, and Web 2.0: Intersections and Open Questions
-
April 7, 2009
This ECAR research bulletin focuses on institutional intellectual property (IP) policy related to instructional products and systems generally and to e-learning specifically. It contrasts IP poli…
-
Spreading the Word: Messaging and Communications in Higher Education Roadmap
-
March 31, 2009
This ECAR roadmap synthesizes the important issues and recommended actions drawn from the 2009 ECAR research study, Spreading the Word: Messaging and Communications in Higher Education Roadmap, b…
-
Spreading the Word: Messaging and Communications in Higher Education - Key Findings
-
March 31, 2009
This document presents the key findings from the 2009 ECAR study, Spreading the Word: Messaging and Communications in Higher Education, by Mark C. Sheehan, with Judith A. Pirani. The study presen…
-
Spreading the Word: Messaging and Communications in Higher Education
-
March 31, 2009
Abstract This 2009 ECAR research study is a comprehensive analysis of how colleges and universities plan, organize, deploy, and support messaging and communication technologies. It provides …
-
Decentralized IT Governance and Policy in Higher Education
-
March 10, 2009
This ECAR research bulletin focuses on the challenges and strategies related to integrating IT governance and policy across multiple university entities (schools, colleges, departments, and campu…
-
Information Confidentiality
-
March 11, 2009
Protecting information confidentiality is a critical security objective for all colleges and universities. Institutions must deploy confidentiality controls in addition to security controls, and…
-
Information Security Governance: Standardizing the Practice of Information Security
-
August 19, 2008
This ECAR research bulletin discusses the trend to use a variety of risk assessment frameworks and standards to create an information security program that is sufficiently comprehensive for colle…
-
Messaging and Communication Survey
-
July 17, 2008
This July 2008 survey is a critical component of the EDUCAUSE Center on Applied Research (ECAR) study of messaging and communication in higher education. It seeks to understand the provision, pol…

















