Security Awareness

Main Nav

Introduction

Awareness and training are critical at all stages and levels of information security. For example, upper management needs to learn about the institutional risks; users must be taught how to defend themselves against malicious code; system and network administrators require training to help them maintain and improve the security of the systems they oversee; and information security support staff must be well-versed in all of these areas and have a solid understanding of vulnerability assessment, intrusion detection, incident response, encryption, and authentication. Every October help us to celebrate National Cyber Security Awareness Month (NCSAM) -- see resources related to this event below.

Resources Developed by the Higher Education Information Security Council (HEISC)

College and University Education and Awareness Programs and Resources

Updated October 2012

Latest News

National Cyber Security Awareness Month 2012 is HERE!

Find resources and see what other campuses are doing this October for NCSAM.

Policy Matters NCSAM Article (Sep/Oct 2012)

NCSAM article in the latest EDUCAUSE Review offers resources and suggestions for campuses to support security awareness efforts in October.

Library Items on this Topic

View All

EDUCAUSE Library Items for Security Awareness

Showing 1 - 10 of 22 Results

Sort by:

Relevancy | Title | Date

Podcast: Larry Conrad on IT Security Then and Now: July 17, 2012

Larry D. Conrad serves as the vice chancellor for information technology and chief information officer at UNC Chapel Hill. He has over 40 years experience in the field of information technolo…
Catch a clue from an EDU: Universities that get security right: May 20, 2011

In these days of consumer gadgets and mobile access, corporations can learn a lot from how universities deploy multiple layers of security. In these da…
Effective Incident Response Strategies for Managing Sensitive Data Incidents: March 10, 2010 | A session at the NERCOMP Annual Conference 2010
In 2009, MIT's Data Incident Response Team (DIRT) experienced a surge of reports of suspected sensitive data exposure incidents. As awareness of the new Massachusetts Data Breach Notification …
RFP Template for Information Security Projects: November 10, 2009

This Request For Proposal template was created to help organizations identify and select a quality security vendor to perform professional services work. It also lists questions organizations sho…
REN-ISAC: Community Support for Cybersecurity Protection and Response: November 10, 2008

As with many institutional endeavors, successful practice in cybersecurity requires that the players (individuals and teams) operate in the context of a community that faces similar challenges, o…
Training Your Staff to Protect SIS Data: September 5, 2007

"No matter how robust your firewall, trained faculty and staff are your first line of defense against system breaches." "No matter…
The Virginia Alliance for Secure Computing and Networking (VA SCAN): A Statewide Collaborative IT Security Resource: October 17, 2006

This case study examines ways in which the Virginia Alliance for Secure Computing and Networking (VA SCAN) provides a blueprint for higher education institutions interested in collaboratively pro…
Baylor University's IT Security Risk Assessment Program: October 12, 2006

This case study examines Baylor University's risk assessment program for information technology security, which was established in the face of the escalating demands that security places on …
Campus IT Security: Governance, Strategy, Policy, and Enforcement: August 15, 2006

Successful implementation of an effective information, data, and system "security blanket" for higher education institutions requires recognition of and action upon the cultural, politi…
Incident Response at UT Austin: January 1, 2006

An interview with VP for IT Dan Updegrove. The recent break-in to an administrative database at the McCombs School of Business at UT Austin (TX), discovered April 21, 2006, may have compromised the…