Security Policies

EDUCAUSE Library Items for Security Policies

A Systematic, Comprehensive Approach to Information Security

July 6, 2005

Information security is a process of business risk management that must be performed on an ongoing basis. It is critical to take an approach to information security that examines the risks and s…

Under Attack in the States Michigan Portal Helps Workers E-learn Cybersecurity Awareness

January 1, 2005

In an effort to raise Internet security awareness, Michigan opened a Web portal that will give state employees access to computer and Internet security awareness programs. Cybersecurity has emerged…

Infosecurity in Academia

January 1, 2005

Changing student bodies, a push for open exchange, and the challenge of securing it all. Changing student bodies, a push for open exchange, and the cha…

Reporting Electronic Security Incidents

January 1, 2004

This policy is in regards to users of information technology devices connected to the Cornell network, who must report all electronic security incidents promptly and to the appropriate party or off…

When the Rubber Meets the Road: Moving from IT Policy Development to Implementation

May 17, 2005

So, you have a solid policy framework to address information security and data access/privacy issues on campus. Now what? Have the policies and procedures been implemented, and are they being enfor…

Conceptual Model for Information Security Strategy

April 4, 2005 | A session at the Security 2005

This session will describe the development, use, and benefits of threeconceptual models for information security: a security strategy andpolicy system, an index of threat levels and defenses, and h…

Conceptual Model for Information Security Strategy

March 21, 2005 | A session at the EDUCAUSE Midwest Regional Conference 2005

This session will describe the development, use, and benefits of three conceptual models for information security: the security strategy and policy system, a scale describing defensive posture, and…

Combining Policy, Practice, and Technology to Architect Layered Network Security at UMBI

January 13, 2005 | A session at the EDUCAUSE Mid-Atlantic Regional Conference 2005

UMBI's implementation of a multi-layered network security environment is explored as one possible model for use by other organizations. This presentation will discuss the need for and limitati…

Corporate Information Security Working Group:

January 1, 2004

The Corporate Information Security Working Group (CISWG) was originally convened in November 2003 by Representative Adam Putnam (R-FL). The Best Practices team surveyed available information secu…

Authentication System Policies and Practices

January 1, 2004

Associated with authentication are policies and procedures that affect the end user, application/service provider, and central authentication service. In many cases procedures are implemented by th…