Security Policies

EDUCAUSE Library Items for Security Policies

Creating an IT Security Baseline

April 16, 2013 | A session at the Security Professionals Conference

The UW–Madison Office of Campus Information Security has worked with the campus community to develop a baseline information systems security standard that's intended to help departments on c…

Ojediran Alaba Bolaji

System Analyst

Lagos University Teaching Hospital

Lagos

NIGERIA

Prepare for National Cyber Security Awareness Month

August 8, 2012

Two Easy Ways to Increase Awareness October is National Cyber Security Awareness Month (NCSAM). Below are two easy ways to increase information security awareness on your campus. …

Protecting the Security of Research Data

November 8, 2011

The effective protection and management of research data has become a hot topic in U.S. higher education. Funding agencies increasingly require data management plans as part of grant submittals…

Guide to Enterprise Telework and Remote Access Security (SP 800-46 Revision 1)

June 4, 2009

Many organizations’ employees and contractors use enterprise telework technologies to perform work from external locations. Most teleworkers use remote access technologies to interface with an…

University of Kansas Medical Center Operational Protocol: Mobile Device Security

August 11, 2010

The purpose of this policy is to provide guidelines for the appropriate use and configuration of mobile devices as necessary to protect the KUMC network and\or information from unauthorized acce…

Information Confidentiality

March 11, 2009

Protecting information confidentiality is a critical security objective for all colleges and universities. Institutions must deploy confidentiality controls in addition to security controls, and…

Final Report of the 2007 Cybersecurity Summit

November 30, 2007

This is the final report for the 2007 NSF Cybersecurity Summit, held February 22 & 23rd, 2007, in Arlington, VA. This is the final report fo…

GSU's Roadmap for a World-Class Information Security Management System: ISO 27001:2005

October 24, 2007 | A session at the EDUCAUSE 2007 Annual Conference

Georgia State University is one of the first universities to embrace the ISO 27001:2005 standard for establishing an information security management system (ISMS). A systematic and disciplined appr…

Virtualizing Campus Network for Security: Divide and Conquer

April 11, 2007 | A session at the Security 2007

This presentation will discuss Virginia Commonwealth University's implementation of virtual networks using multiprotocol layer switching (MPLS) to enable us to quickly segment the network so t…