Security Management

Main Nav

Browse this Topic

Information Security Guide: Effective Practices and Solutions for Higher Education

The Information Security Guide: Effective Practices and Solutions for Higher Education is a compendium of information providing guidance on effective approaches to the application of information security at institutions of higher education. It is a key publication of the Higher Education Information Security Council. The guide's content is actively maintained by a large group of volunteers who are information security practitioners at a variety of colleges and universities. The content itself is a rich combination of materials written for the guide, articles written for other publications, presentations from information security conferences, case studies, examples of processes, procedures, and forms used by various institutions, toolkits, hot topics, and references to a wide variety of other materials from EDUCAUSE and other sources. This infographic provides a quick overview of the guide.

Featured Resources of the Information Security Guide include:

Confidential Data Handling Blueprint
Data Classification Toolkit
Data Incident Notification Toolkit
Data Protection Contractual Language: Common Themes and Examples
Guidelines for Data De-Identification or Anonymization
Guidelines for Information Media Sanitization
Electronic Records Management Toolkit
Guidelines for Responding to Compulsory Legal Requests for Information
Hot Topics (e.g., malware, mobile devices, and social networking)
Information Security Governance
National Cyber Security Awareness Month Resource Kit
PCI DSS (Payment Card Industry Data Security Standard) Resource Page
Risk Assessment Consultants List, Sample RFPs, and Tools List
Risk Management Framework
Security Awareness Quick Start Guide, Detailed Instruction Manual, and Speakers Bureau
Top Information Security Concerns for Campus Executives and Data Stewards
Top Information Security Concerns for HR Leaders & Process Participants - Protecting Your HR Assets
Additional Toolkits

Updated October 2012

Latest News

Five Pilot Projects Receive Grants to Promote Online Security and Privacy

InCommon will be heavily involved in a $1.8 million grant awarded to Internet2 to build a consistent and robust privacy infrastructure. Partners include Carnegie Mellon, Brown, University of Texas...

Virginia Tech First to Achieve Bronze and Silver Assurance

Virginia Tech has become the first identity provider to achieve Bronze and Silver certification as part of the InCommon Assurance Program.

Recommended IAM Sessions at EDUCAUSE 2012

The annual EDUCAUSE Conference in Denver will provide an opportunity to explore the range and depth of issues that campuses must consider as they build...

Recommended Security & Privacy Sessions at EDUCAUSE 2012

Find a variety of E12 security and privacy-related sessions in Denver or online.

Policy Matters NCSAM Article (Sep/Oct 2012)

NCSAM article in the latest EDUCAUSE Review offers resources and suggestions for campuses to support security awareness efforts in October.

The Future of Federated Identity: Or, Whither SAML?

Eve Maler, an expert on emerging identity and security at Forrester Research, discusses the past, present, and future of SAML in this webinar recording.

Library Items on this Topic

View All

EDUCAUSE Library Items for Security Management

Showing 1 - 10 of 29 Results

Sort by:

Relevancy | Title | Date

Protecting the Security of Research Data: November 8, 2011

The effective protection and management of research data has become a hot topic in U.S. higher education. Funding agencies increasingly require data management plans as part of grant submittals…
Does Higher Education Need a New Ethical Framework for the Internet?: March 22, 2011

This ECAR research bulletin is designed to help decision makers in higher education assess the applicability of four significant historical codes of ethics as they evaluate their current polic…
Information Confidentiality: March 11, 2009

Protecting information confidentiality is a critical security objective for all colleges and universities. Institutions must deploy confidentiality controls in addition to security controls, and…
Information Security Governance: Standardizing the Practice of Information Security: August 19, 2008

This ECAR research bulletin discusses the trend to use a variety of risk assessment frameworks and standards to create an information security program that is sufficiently comprehensive for colle…
IT Security Officer Survey: April 9, 2008

This April 2008 survey is a critical component of the EDUCAUSE Center on Applied Research (ECAR) study of information security officers in higher education. It seeks to understand the important c…
Managing IT Risk in Higher Education: A Methodology: March 18, 2008

This research bulletin presents a methodology, used successfully at the University of Technology, Sydney (UTS) in Australia, for managing and assessing risks related to information technology sys…
Local IT Security for Colleges, Schools, and Departments: A Higher Education Perspective: December 5, 2006

This bulletin discusses some of the lessons learned by the Emory College, Faculty of Arts and Sciences, in developing its information technology security strategy, as well as what other schools g…
Most Improved: How Four Institutions Developed Successful IT Security Programs: November 3, 2006

Researchers conducted this in-depth case study to complement the ECAR study, Safeguarding the Tower: IT Security in Higher Education 2006. The case study examines how four higher education instit…
The Virginia Alliance for Secure Computing and Networking (VA SCAN): A Statewide Collaborative IT Security Resource: October 17, 2006

This case study examines ways in which the Virginia Alliance for Secure Computing and Networking (VA SCAN) provides a blueprint for higher education institutions interested in collaboratively pro…
Safeguarding the Tower: IT Security in Higher Education 2006: October 11, 2006

Presentation at EDUCAUSE 2006, October 9-12, 2006, Dallas, Texas. This presentation summarizes the findings of the EDUCAUSE Center for Applied Research 2006 study of information technology securi…