Security Management

Main Nav

Browse this Topic

Information Security Guide: Effective Practices and Solutions for Higher Education

The Information Security Guide: Effective Practices and Solutions for Higher Education is a compendium of information providing guidance on effective approaches to the application of information security at institutions of higher education. It is a key publication of the Higher Education Information Security Council. The guide's content is actively maintained by a large group of volunteers who are information security practitioners at a variety of colleges and universities. The content itself is a rich combination of materials written for the guide, articles written for other publications, presentations from information security conferences, case studies, examples of processes, procedures, and forms used by various institutions, toolkits, hot topics, and references to a wide variety of other materials from EDUCAUSE and other sources. This infographic provides a quick overview of the guide.

Featured Resources of the Information Security Guide include:

Confidential Data Handling Blueprint
Data Classification Toolkit
Data Incident Notification Toolkit
Data Protection Contractual Language: Common Themes and Examples
Guidelines for Data De-Identification or Anonymization
Guidelines for Information Media Sanitization
Electronic Records Management Toolkit
Guidelines for Responding to Compulsory Legal Requests for Information
Hot Topics (e.g., malware, mobile devices, and social networking)
Information Security Governance
National Cyber Security Awareness Month Resource Kit
PCI DSS (Payment Card Industry Data Security Standard) Resource Page
Risk Assessment Consultants List, Sample RFPs, and Tools List
Risk Management Framework
Security Awareness Quick Start Guide, Detailed Instruction Manual, and Speakers Bureau
Top Information Security Concerns for Campus Executives and Data Stewards
Top Information Security Concerns for HR Leaders & Process Participants - Protecting Your HR Assets
Additional Toolkits

Updated October 2012

Latest News

Five Pilot Projects Receive Grants to Promote Online Security and Privacy

InCommon will be heavily involved in a $1.8 million grant awarded to Internet2 to build a consistent and robust privacy infrastructure. Partners include Carnegie Mellon, Brown, University of Texas...

Virginia Tech First to Achieve Bronze and Silver Assurance

Virginia Tech has become the first identity provider to achieve Bronze and Silver certification as part of the InCommon Assurance Program.

Recommended IAM Sessions at EDUCAUSE 2012

The annual EDUCAUSE Conference in Denver will provide an opportunity to explore the range and depth of issues that campuses must consider as they build...

Recommended Security & Privacy Sessions at EDUCAUSE 2012

Find a variety of E12 security and privacy-related sessions in Denver or online.

Policy Matters NCSAM Article (Sep/Oct 2012)

NCSAM article in the latest EDUCAUSE Review offers resources and suggestions for campuses to support security awareness efforts in October.

The Future of Federated Identity: Or, Whither SAML?

Eve Maler, an expert on emerging identity and security at Forrester Research, discusses the past, present, and future of SAML in this webinar recording.

Library Items on this Topic

View All

EDUCAUSE Library Items for Security Management

Showing 1 - 10 of 21 Results

Sort by:

Relevancy | Title | Date

ECPA Reform Update: February 11, 2013

Recording of the January 29, 2013 call with Greg Nojeim, Senior Counsel at the Center for Democracy & Technology on the Electronic Communications Privacy Act (ECPA) reform and its implication…
Data Privacy Month Awareness Video, 2013: January 14, 2013

SANS and EDUCAUSE have developed a free privacy awareness video that colleges and universities can use during Data Privacy Month in January, and throughout the year, in their privacy educ…
ECPA Amendment Letter: July 31, 2012

In this letter sent to Senate Majority Leader Reid and Minority Leader McConnell, EDUCAUSE joined with the Association of Research Libraries, businesses, and other trade associations to support …
Data Privacy Month 2012: June 25, 2012

This guide links to information about Data Privacy Month 2012 and Data Privacy Day (January 28), including blog entries, Data Privacy Month webinars and resources, and links to events and informa…
That Was The Year That Was, 2011: January 9, 2012

So, what did the EDUCAUSE Policy group in Washington do in 2011? In general, we did what we've always done: worked closely with our campus constituents to understand and provide assistance…
Data Privacy Legislation: An Analysis of the Current Legislative Landscape and the Implications for Higher Education (8/12/11): August 12, 2011

With the ubiquity of mobile devices and the increases in data breaches, Congress has responded with bipartisan support for comprehensive privacy legislation. As of August 2011, 18 bills have bee…
Response to the Department of Commerce Notice of Inquiry for Models for a Governance Structure for NSTIC (July 22, 2011): July 22, 2011

Response to the Department of Commerce Notice of Inquiry for Models for a Governance Structure for the National Strategy for Trusted Identities in Cyberspace (NSTIC). Prepared by EDUCAUSE, Inter…
EDUCAUSE Comments on Proposed FERPA Rules (May 23, 2011): May 23, 2011

This May 23, 2011 letter to the Department of EDUCATION includes comments from EDUCAUSE on the Notice of Proposed Rulemaking to amend the Family Educational Rights and Privacy Act (FERPA). T…
Letter to Internet Policy Task Force: June 7, 2010

A letter from EDUCAUSE to the Internet Policy Task Force. A letter from EDUCAUSE to the Internet Policy Task Force. …
Partly Cloudy? What a CBO Should Know about Cloud Computing: June 29, 2009

Cloud computing presents an opportunity for outsourcing what have long been core internal IT functions and systems on campus. In the coming months and years, many institutions will be exploring …