Security Management

Main Nav

Browse this Topic

Information Security Guide: Effective Practices and Solutions for Higher Education

The Information Security Guide: Effective Practices and Solutions for Higher Education is a compendium of information providing guidance on effective approaches to the application of information security at institutions of higher education. It is a key publication of the Higher Education Information Security Council. The guide's content is actively maintained by a large group of volunteers who are information security practitioners at a variety of colleges and universities. The content itself is a rich combination of materials written for the guide, articles written for other publications, presentations from information security conferences, case studies, examples of processes, procedures, and forms used by various institutions, toolkits, hot topics, and references to a wide variety of other materials from EDUCAUSE and other sources. This infographic provides a quick overview of the guide.

Featured Resources of the Information Security Guide include:

Confidential Data Handling Blueprint
Data Classification Toolkit
Data Incident Notification Toolkit
Data Protection Contractual Language: Common Themes and Examples
Guidelines for Data De-Identification or Anonymization
Guidelines for Information Media Sanitization
Electronic Records Management Toolkit
Guidelines for Responding to Compulsory Legal Requests for Information
Hot Topics (e.g., malware, mobile devices, and social networking)
Information Security Governance
National Cyber Security Awareness Month Resource Kit
PCI DSS (Payment Card Industry Data Security Standard) Resource Page
Risk Assessment Consultants List, Sample RFPs, and Tools List
Risk Management Framework
Security Awareness Quick Start Guide, Detailed Instruction Manual, and Speakers Bureau
Top Information Security Concerns for Campus Executives and Data Stewards
Top Information Security Concerns for HR Leaders & Process Participants - Protecting Your HR Assets
Additional Toolkits

Updated October 2012

Latest News

Five Pilot Projects Receive Grants to Promote Online Security and Privacy

InCommon will be heavily involved in a $1.8 million grant awarded to Internet2 to build a consistent and robust privacy infrastructure. Partners include Carnegie Mellon, Brown, University of Texas...

Virginia Tech First to Achieve Bronze and Silver Assurance

Virginia Tech has become the first identity provider to achieve Bronze and Silver certification as part of the InCommon Assurance Program.

Recommended IAM Sessions at EDUCAUSE 2012

The annual EDUCAUSE Conference in Denver will provide an opportunity to explore the range and depth of issues that campuses must consider as they build...

Recommended Security & Privacy Sessions at EDUCAUSE 2012

Find a variety of E12 security and privacy-related sessions in Denver or online.

Policy Matters NCSAM Article (Sep/Oct 2012)

NCSAM article in the latest EDUCAUSE Review offers resources and suggestions for campuses to support security awareness efforts in October.

The Future of Federated Identity: Or, Whither SAML?

Eve Maler, an expert on emerging identity and security at Forrester Research, discusses the past, present, and future of SAML in this webinar recording.

Library Items on this Topic

View All

EDUCAUSE Library Items for Security Management

Showing 1 - 10 of 45 Results

Sort by:

Relevancy |

Title | Date

A Conversation with CIOs on Current Campus IT Initiatives and Trends: August 9, 2011

Join leading CIOs in a conversation about their current campus IT issues and initiatives. Hear and discuss the institutional challenges CIO and Senior IT Leaders are facing related to administ…
A Tale of Two Tracks: Social Engineering Your Students and Detecting Bots with DNS: January 1, 2006

High-speed connections and lots of personal computers make campus networks target-rich environments for malware and botnet recruitment. Without a policy enforcement tool to manage student connect…
Balancing the Need for Security and Open, Collaborative Networking: January 1, 2004

The EDUCAUSE Center for Applied Research (ECAR) study of IT security in higher education portrays an industry that is struggling to secure a culturally open environment against the rising tide of…
Campus and National Approaches to Improving Cyber Security Awareness: January 1, 2004

The solutions necessary to improve cyber security require a combination of approaches that involve people, processes, and technology. Consequently, a key ingredient to any cyber security strategy…
Cybersecurity as a Shared Responsibility: Stop, Think, and Connect: October 4, 2011

October is National Cyber Security Awareness Month . In this webinar, representatives from the White House, the U.S. Department of Education, and the Higher Education Information Security Cou…
Data Privacy Month: Are You Smarter Than Your Phone?: January 9, 2013

Nearly everyone on a college campus today has a mobile phone, capable of accomplishing amazing tasks while on the go. But, how SHOULD you make use of your smartphone? You are smarter than your ph…
Fight Back Against Identity Theft: January 1, 2006

There's no surefire way to protect yourself from identity theft, but there are steps you can take to minimize the risk of becoming a victim. That is the message of a nationwide education pro…
Going Beyond Recovery to Continuity: Lessons Learned: January 1, 2006

The main campus of The George Washington University is located just a few blocks from the White House. The series of events surrounding 9/11 helped to accelerate advancement of a university-wide …
Government Access to Electronic Communications—Updating the Rules: June 9, 2010

The Electronic Communications Privacy Act (ECPA) was a forward-looking statute when enacted in 1986. It specified standards for law enforcement access to e-mail and other electronic communication…
HEISC Town Hall Webinar: 2012-2013 Strategic Plan: January 9, 2012

In this webinar, the Higher Education Information Security Council (HEISC) discussed the following topics; Information security changes in the past 10 years Ongoing challenges for sec…