Security Management

Main Nav

Browse this Topic

Information Security Guide: Effective Practices and Solutions for Higher Education

The Information Security Guide: Effective Practices and Solutions for Higher Education is a compendium of information providing guidance on effective approaches to the application of information security at institutions of higher education. It is a key publication of the Higher Education Information Security Council. The guide's content is actively maintained by a large group of volunteers who are information security practitioners at a variety of colleges and universities. The content itself is a rich combination of materials written for the guide, articles written for other publications, presentations from information security conferences, case studies, examples of processes, procedures, and forms used by various institutions, toolkits, hot topics, and references to a wide variety of other materials from EDUCAUSE and other sources. This infographic provides a quick overview of the guide.

Featured Resources of the Information Security Guide include:

Confidential Data Handling Blueprint
Data Classification Toolkit
Data Incident Notification Toolkit
Data Protection Contractual Language: Common Themes and Examples
Guidelines for Data De-Identification or Anonymization
Guidelines for Information Media Sanitization
Electronic Records Management Toolkit
Guidelines for Responding to Compulsory Legal Requests for Information
Hot Topics (e.g., malware, mobile devices, and social networking)
Information Security Governance
National Cyber Security Awareness Month Resource Kit
PCI DSS (Payment Card Industry Data Security Standard) Resource Page
Risk Assessment Consultants List, Sample RFPs, and Tools List
Risk Management Framework
Security Awareness Quick Start Guide, Detailed Instruction Manual, and Speakers Bureau
Top Information Security Concerns for Campus Executives and Data Stewards
Top Information Security Concerns for HR Leaders & Process Participants - Protecting Your HR Assets
Additional Toolkits

Updated October 2012

Latest News

Five Pilot Projects Receive Grants to Promote Online Security and Privacy

InCommon will be heavily involved in a $1.8 million grant awarded to Internet2 to build a consistent and robust privacy infrastructure. Partners include Carnegie Mellon, Brown, University of Texas...

Virginia Tech First to Achieve Bronze and Silver Assurance

Virginia Tech has become the first identity provider to achieve Bronze and Silver certification as part of the InCommon Assurance Program.

Recommended IAM Sessions at EDUCAUSE 2012

The annual EDUCAUSE Conference in Denver will provide an opportunity to explore the range and depth of issues that campuses must consider as they build...

Recommended Security & Privacy Sessions at EDUCAUSE 2012

Find a variety of E12 security and privacy-related sessions in Denver or online.

Policy Matters NCSAM Article (Sep/Oct 2012)

NCSAM article in the latest EDUCAUSE Review offers resources and suggestions for campuses to support security awareness efforts in October.

The Future of Federated Identity: Or, Whither SAML?

Eve Maler, an expert on emerging identity and security at Forrester Research, discusses the past, present, and future of SAML in this webinar recording.

Library Items on this Topic

View All

EDUCAUSE Library Items for Security Management

Showing 1 - 10 of 37 Results

Sort by:

Relevancy |

Title | Date

2006 Annual Study: Cost of a Data Breach Understanding Financial Impact, Customer Turnover, and Preventative Solutions: July 24, 2006

This study summarizies the actual costs incurred by 31 organizations that lost confidential customer information and had a regulatory requirement to publicly notify affected individuals. …
2008 Data Breach Investigations Report: July 1, 2008

The 2008 Data Breach Investigations Report draws from over 500 forensic engagements handled by the Verizon Business Investigative Response team over a four-year period. Tens of thousands of data …
A Day at the Breach: March 13, 2012 | A session at the NERCOMP Annual Conference 2012
It's August 10 at the University of Wisconsin–Milwaukee and the school is not contemplating how to spend a day at the beach. Instead, they are informing approximately 75,000 individuals asso…
Baylor University's IT Security Risk Assessment Program: October 12, 2006

This case study examines Baylor University's risk assessment program for information technology security, which was established in the face of the escalating demands that security places on …
Collecting and Preserving Data in the Wake of a Tragedy: May 6, 2008 | A session at the Security 2008
After the tragic events of April 16, 2007, at Virginia Tech, IT professionals and university legal counsel had to quickly address the need to collect and preserve data in the event of future litiga…
Compliance Matrix Poster for IT & Compliance Professionals: March 17, 2010

This matrix poster developed by Symantec outlines IT Controls for security and privacy concerns related to regulatory compliance in the workplace. Topics addressed in this poster include: Regu…
Computer and Network Security in Higher Education: January 1, 2003

Computer and Network Security in Higher Education offers campus leaders and IT professionals an essential resource for determining the most technically viable, cost-effective, and culturally …
Cyber Security: The Laws That Govern Incident Response: January 1, 2004

This presentation will provide an overview of federal laws designed to fight cyber crime. A federal trial attorney will describe the monitoring of communications and traffic during an incident. Gui…
Data Breach Notification: Discussing Reactive Processes and Proactive Strategies: April 5, 2011 | A session at the Security Professionals Conference 2011
Data security and privacy are focal points in many institutions' information security programs. There is a complex set of legal and regulatory frameworks for protecting data that we are entrus…
Data Incident Notification Toolkit: January 1, 2005

The Data Incident Notification Toolkit includes resources that cover a range of issues that commonly arise in the heat of the moment when responding to data incidents. If your institution has a d…