-
Research
and Publications
Current Issue
March/April 2013
EDUCAUSE ReviewPublications
-
Conferences
and Events
Annual Conference
October 15–18, 2013
Save the date!Events for all Levels and Interests
Whether you're looking for a conference to attend face-to-face to connect with peers, or for an online event for team professional development, see what's upcoming.
-
Career
Development
EDUCAUSE Institute
Leadership/Management Programs
Explore MoreCareer Center
Leadership and Management Programs
EDUCAUSE Institute
Advanced Programs
Project Management
Jump Start Your Career Growth
Explore EDUCAUSE professional development opportunities that match your career aspirations and desired level of time investment through our interactive online guide.
-
Focus Areas
and InitiativesLatest Topics
EDUCAUSE organizes its efforts around three IT Focus Areas
Join These Programs If Your Focus Is
-
Connect
and ContributeFind Others
Get on the Higher Ed IT Map
Employees of EDUCAUSE member institutions and organizations are invited to create individual profiles.
-
About
EDUCAUSE
Filter by type
Filter by Publications
- EDUCAUSE Policy Office [x]
- Community (1)
Filter by Library Taxonomy
- Cybersecurity [x]
- Security Management (21)
- Policy and Law (20)
- Federal Policy and Law (18)
- Privacy (15)
- Federal Privacy Law (11)
- Data Security (8)
- Family Educational Rights and Privacy Act (FERPA) (6)
- Identity and Access Management (6)
- Cybersecurity Policy (5)
- Network Security and Applications (5)
- Networking and Emerging Technologies (5)
- Information Systems and Services (4)
- Information Technology Management and Leadership (4)
- Campus Policy and Law (3)
- Cyberinfrastructure (3)
- Data Privacy (3)
- Teaching and Learning (3)
- E-Learning (2)
- Health Insurance Portability and Accountability Act (HIPAA) (2)
Resources Developed by the Higher Education Information Security Council (HEISC)
- Information Security Governance
- Information Security Governance Assessment Tool
- Information Security Risk Assessment Consultants List
- Information Security Risk Assessment Sample RFPs
- Risk Assessment Tools
- Risk Management Framework
Risk Analysis and Security Evaluation Tools
- Electronic Risk and Requirements Assessment (E-RA)
- CCTA (Central Computer and Telecommunications Agency) Risk Analysis and Management Method (CRAMM)
- Control Objectives for Information and related Technology (COBIT)
- NIST Recommended Security and Privacy Controls for Federal Information Systems and Organizations (SP 800-53)
- NIST's "An Overview of Issues in Testing Intrusion Detection Systems"
- Operationally Critical Threat, Asset, and Vulnerability EvaluationSM (OCTAVE)
- Security Targeting and Analysis of Risks (STAR)
Updated October 2012
Library Items on this Topic
EDUCAUSE Library Items for Security Risk Assessment and Analysis
-
EDUCAUSE Response to NIST RFI: Developing a Framework to Improve Critical Infrastructure Cybersecurity
-
April 9, 2013
The Higher Education Information Security Council (HEISC), hosted by EDUCAUSE and Internet2, is pleased to submit comments to the NIST Request For Information on Developing a Framework to Improve…
-
ECPA Reform Update
-
February 11, 2013
Recording of the January 29, 2013 call with Greg Nojeim, Senior Counsel at the Center for Democracy & Technology on the Electronic Communications Privacy Act (ECPA) reform and its implication…
-
Fed. Regs. on Student Identity Verification, State Authorization of Distance Ed. Back on the Radar
-
April 16, 2013
As reported in today's Inside Higher Ed , the U.S. Department of Education (ED) has announced its intent to modify the rule-making effort it originally proposed last year …
-
Data Privacy Month Awareness Video, 2013
-
January 14, 2013
SANS and EDUCAUSE have developed a free privacy awareness video that colleges and universities can use during Data Privacy Month in January, and throughout the year, in their privacy educ…
-
ECPA Amendment Letter
-
July 31, 2012
In this letter sent to Senate Majority Leader Reid and Minority Leader McConnell, EDUCAUSE joined with the Association of Research Libraries, businesses, and other trade associations to support …
-
Data Privacy Month 2012
-
June 25, 2012
This guide links to information about Data Privacy Month 2012 and Data Privacy Day (January 28), including blog entries, Data Privacy Month webinars and resources, and links to events and informa…
-
More financial aid fraud rings targeting online learning busted
-
September 19, 2012
As reported in Inside Higher Ed , the U.S. Department of Education (ED) Office of the Inspector General (OIG) and the U.S. Attorney for the Eastern District of California announced yes…
-
That Was The Year That Was, 2011
-
January 9, 2012
So, what did the EDUCAUSE Policy group in Washington do in 2011? In general, we did what we've always done: worked closely with our campus constituents to understand and provide assistance…
-
Data Privacy Legislation: An Analysis of the Current Legislative Landscape and the Implications for Higher Education (8/12/11)
-
August 12, 2011
With the ubiquity of mobile devices and the increases in data breaches, Congress has responded with bipartisan support for comprehensive privacy legislation. As of August 2011, 18 bills have bee…
-
Response to the Department of Commerce Notice of Inquiry for Models for a Governance Structure for NSTIC (July 22, 2011)
-
July 22, 2011
Response to the Department of Commerce Notice of Inquiry for Models for a Governance Structure for the National Strategy for Trusted Identities in Cyberspace (NSTIC). Prepared by EDUCAUSE, Inter…
