-
Research
and PublicationsStay -
Conferences
and EventsAnnual Conference
October 15–18, 2013
Save the date!Events for all Levels and Interests
Whether you're looking for a conference to attend face-to-face to connect with peers, or for an online event for team professional development, see what's upcoming.
Stay -
Career
DevelopmentEDUCAUSE Institute
Leadership/Management Programs
Explore MoreCareer Center
Leadership and Management Programs
EDUCAUSE Institute
Advanced Programs
Project Management
Jump Start Your Career Growth
Explore EDUCAUSE professional development opportunities that match your career aspirations and desired level of time investment through our interactive online guide.
Stay -
Focus Areas
and InitiativesLatest Topics
EDUCAUSE organizes its efforts around three IT Focus Areas
Join These Programs If Your Focus Is
Stay -
Connect
and ContributeFind Others
Get on the Higher Ed IT Map
Employees of EDUCAUSE member institutions and organizations are invited to create individual profiles.
Stay -
About
EDUCAUSEUncommon Thinking for the Common Good™
EDUCAUSE is the foremost community of higher education IT leaders and professionals.
Stay
Subscribe
Filter by type
Filter by Publications
Filter by Presentations
Filter by Library Taxonomy
- Incident Handling and Response [x]
- Security Management [x]
- Security Policies [x]
- Campus Policies (28)
- Campus Policy and Law (28)
- Cybersecurity (28)
- Policy and Law (28)
- Federal Policy and Law (13)
- Information Technology Management and Leadership (13)
- Cybersecurity Policy (12)
- IT Governance (11)
- Institutional Management (11)
- Security Planning (7)
- Security Awareness (6)
- Security Risk Assessment and Analysis (6)
- Network Security and Applications (4)
- Data Security (3)
- Information Security Governance (3)
- Institutional Administration (3)
- Intrusion Detection and Prevention (2)
EDUCAUSE Library Items for Security Policies
-
A Systematic, Comprehensive Approach to Information Security
-
July 6, 2005
Information security is a process of business risk management that must be performed on an ongoing basis. It is critical to take an approach to information security that examines the risks and s…
-
Baylor University's IT Security Risk Assessment Program
-
October 12, 2006
This case study examines Baylor University's risk assessment program for information technology security, which was established in the face of the escalating demands that security places on …
-
Be Prepared
-
August 19, 2010
The first rule of incident management is to accept that you will have an incident. Use these five best practices to get your institution ready. T…
-
Campus IT Security: Governance, Strategy, Policy, and Enforcement
-
August 15, 2006
Successful implementation of an effective information, data, and system "security blanket" for higher education institutions requires recognition of and action upon the cultural, politi…
-
Computer and Network Security in Higher Education
-
January 1, 2003
Computer and Network Security in Higher Education offers campus leaders and IT professionals an essential resource for determining the most technically viable, cost-effective, and culturally …
-
Crisis Communications for Security Issues: A Nightmare You Can Manage
-
January 1, 2004
Find out how one university managed a computer security incident involving foreign student data by using a team approach and a planning model for response to the media, students, and law enforcemen…
-
Data-Incident Notification Policies and Procedures
-
April 10, 2006
|
A session at the Security 2006
Information security policies and procedures increasingly must respond to legal requirements in the area of notification in the event of a breach of personally identifiable information. This sessio…
-
Final Report of the 2007 Cybersecurity Summit
-
November 30, 2007
This is the final report for the 2007 NSF Cybersecurity Summit, held February 22 & 23rd, 2007, in Arlington, VA. This is the final report fo…
-
Incident Response from the Ground Up
-
March 11, 2008
|
A session at the NERCOMP Annual Conference 2008
Recognizing that an incident response policy is only as good as the procedures that support it, Dartmouth College developed its approach to incident response from the bottom up. This session will h…
-
Incident Response: Lessons Learned from Georgia Tech, the University of Montana, and the University of Texas at Austin
-
October 13, 2003
This case study is a companion to the 2003 ECAR research study "Information Technology Security: Governance and Strategy in Higher Education." This study examines how information techno…


















