Security Management

Main Nav

Browse this Topic

Information Security Guide: Effective Practices and Solutions for Higher Education

The Information Security Guide: Effective Practices and Solutions for Higher Education is a compendium of information providing guidance on effective approaches to the application of information security at institutions of higher education. It is a key publication of the Higher Education Information Security Council. The guide's content is actively maintained by a large group of volunteers who are information security practitioners at a variety of colleges and universities. The content itself is a rich combination of materials written for the guide, articles written for other publications, presentations from information security conferences, case studies, examples of processes, procedures, and forms used by various institutions, toolkits, hot topics, and references to a wide variety of other materials from EDUCAUSE and other sources. This infographic provides a quick overview of the guide.

Featured Resources of the Information Security Guide include:

Confidential Data Handling Blueprint
Data Classification Toolkit
Data Incident Notification Toolkit
Data Protection Contractual Language: Common Themes and Examples
Guidelines for Data De-Identification or Anonymization
Guidelines for Information Media Sanitization
Electronic Records Management Toolkit
Guidelines for Responding to Compulsory Legal Requests for Information
Hot Topics (e.g., malware, mobile devices, and social networking)
Information Security Governance
National Cyber Security Awareness Month Resource Kit
PCI DSS (Payment Card Industry Data Security Standard) Resource Page
Risk Assessment Consultants List, Sample RFPs, and Tools List
Risk Management Framework
Security Awareness Quick Start Guide, Detailed Instruction Manual, and Speakers Bureau
Top Information Security Concerns for Campus Executives and Data Stewards
Top Information Security Concerns for HR Leaders & Process Participants - Protecting Your HR Assets
Additional Toolkits

Updated October 2012

Latest News

Five Pilot Projects Receive Grants to Promote Online Security and Privacy

InCommon will be heavily involved in a $1.8 million grant awarded to Internet2 to build a consistent and robust privacy infrastructure. Partners include Carnegie Mellon, Brown, University of Texas...

Virginia Tech First to Achieve Bronze and Silver Assurance

Virginia Tech has become the first identity provider to achieve Bronze and Silver certification as part of the InCommon Assurance Program.

Recommended IAM Sessions at EDUCAUSE 2012

The annual EDUCAUSE Conference in Denver will provide an opportunity to explore the range and depth of issues that campuses must consider as they build...

Recommended Security & Privacy Sessions at EDUCAUSE 2012

Find a variety of E12 security and privacy-related sessions in Denver or online.

Policy Matters NCSAM Article (Sep/Oct 2012)

NCSAM article in the latest EDUCAUSE Review offers resources and suggestions for campuses to support security awareness efforts in October.

The Future of Federated Identity: Or, Whither SAML?

Eve Maler, an expert on emerging identity and security at Forrester Research, discusses the past, present, and future of SAML in this webinar recording.

Library Items on this Topic

View All

EDUCAUSE Library Items for Security Management

Showing 51 - 60 of 63 Results

Sort by:

Relevancy | Title | Date

ELI Releases New White Paper on Privacy Considerations in Cloud-Based Teaching and Learning Environments: January 6, 2011

ELI has released a new white paper, Privacy Considerations in Cloud-Based Teaching and Learning Environments , by Veronica Diaz (EDUCAUSE), Joann Martyn Golas (DePaul University), and Su…
Stanford Data Classification Guidelines: December 13, 2011

Criteria used to determine which data category is appropriate for a particular information or infrastructure system at Stanford University. Cri…
Privacy & Compliance: Better Safe Than Sorry: January 1, 2005

A brief description of current privacy and compliance and why it's important for higher ed institutions to stay involved. A brief description of c…
Letter to University of Wisconsin-River Falls re: Student Account Identifiers: January 1, 2004

A letter outlining the FERPA rule on electronic IDs. The letter states that there is nothing wrong with schools releasing electronic IDs as long as (a) they're not derived from SSNs, and (b) …
Making the Panopticon Opaque: Privacy, Policy, and Authentication: January 1, 2004

Academic Technology Services and the Campus Legal Information Clearinghouse (CLIC) have developed a model partnership to help the Catholic University of America meet the challenges at the intersect…
Unexpected Legal Issues Related to Community Building Efforts: January 1, 2003

The University of Central Florida's home-grown community building tool "eCommunity" provides an easy way for faculty and students to see each other's names, e-mails, photos, and…
Life with HIPAA: A Primer for Higher Education: April 1, 2003

The Health Insurance Portability and Accountability Act of 1996 (HIPAA) includes complex legislation that impacts higher education but was not specifically written with academic institutions in m…
Privacy: January 1, 2005

An EDUCAUSE issue brief on privacy. Includes resources of significance for EDUCAUSE members. An EDUCAUSE issue brief on privacy. Includes resources of …
Computing Policies: January 1, 2005

JMU's Computing Policies include information on Information Technology Resource Management, Systems Implementation & Project Management, End-User Computing, Information Security, Univer…
HIPAA and FERPA (or Is Your HIPAA Eating Your FERPA?): January 1, 2001

This presentation discusses the history of HIPAA and FERPA and the legal differences between them. This presentation discusses the history of HIPAA and…