Security Policies

EDUCAUSE Library Items for Security Policies

Reporting Electronic Security Incidents

January 1, 2004

This policy is in regards to users of information technology devices connected to the Cornell network, who must report all electronic security incidents promptly and to the appropriate party or off…

When the Rubber Meets the Road: Moving from IT Policy Development to Implementation

May 17, 2005

So, you have a solid policy framework to address information security and data access/privacy issues on campus. Now what? Have the policies and procedures been implemented, and are they being enfor…

Policy Foundations for Secure Computing

April 27, 2005 | A session at the EDUCAUSE Western Regional Conference 2005

The poster session will feature UC Berkeley's award-winning policies for information technology security and minimum security standards for networked devices. It will present a clear graphical…

A Primer on Policy Development for Institutions of Higher Education

January 1, 2003

This primer was excerpted from a chapter on "Policy Development for Improved Security" from the book Computer and Network Security in Higher Education , Jossey-Bass, 2003. …

Syracuse University Secure Remote Access

January 1, 2004

This Syracuse University policy deals with anyone accessing enterprise data from a non-campus location must be authorized to access the data and authorized to work remotely. He or she must then c…

Conceptual Model for Information Security Strategy

April 4, 2005 | A session at the Security 2005

This session will describe the development, use, and benefits of threeconceptual models for information security: a security strategy andpolicy system, an index of threat levels and defenses, and h…

Conceptual Model for Information Security Strategy

March 21, 2005 | A session at the EDUCAUSE Midwest Regional Conference 2005

This session will describe the development, use, and benefits of three conceptual models for information security: the security strategy and policy system, a scale describing defensive posture, and…

Security, Privacy, Copyright and Other Institutional Policy Implications of Online Learning

January 25, 2005 | A session at the NLII Annual Conference 2005

Important legal, policy, and ethical issues are associated with the delivery of online courses. Many of the situations that arise in online environments are already well covered by existing institu…

Combining Policy, Practice, and Technology to Architect Layered Network Security at UMBI

January 13, 2005 | A session at the EDUCAUSE Mid-Atlantic Regional Conference 2005

UMBI's implementation of a multi-layered network security environment is explored as one possible model for use by other organizations. This presentation will discuss the need for and limitati…

Corporate Information Security Working Group:

January 1, 2004

The Corporate Information Security Working Group (CISWG) was originally convened in November 2003 by Representative Adam Putnam (R-FL). The Best Practices team surveyed available information secu…