Security Risk Assessment and Analysis | EDUCAUSE.edu

Main Nav

Browse this Topic

Expand Topic...

< Security Management

Your Selections Under:

Security Risk Assessment and Analysis [x]

Clear All Filters

Filter by type

Filter by Publications

Filter by Presentations

Resources Developed by the Higher Education Information Security Council (HEISC)

Risk Analysis and Security Evaluation Tools

Updated October 2012

Library Items on this Topic

EDUCAUSE Library Items for Security Risk Assessment and Analysis

Showing 41 - 50 of 194 Results

Sort by:

Relevancy | Title | Date

RFP Template for Information Security Projects: November 10, 2009

This Request For Proposal template was created to help organizations identify and select a quality security vendor to perform professional services work. It also lists questions organizations sho…
Information Technology Sector Baseline Risk Assessment: August 28, 2009

The IT Sector Baseline Risk Assessment evaluates risk to the IT Sector and focuses on critical IT Sector functions. The assessment methodology is not intended to be guidance for individual entiti…
Intrusion Detection: Getting to Know Bro: September 14, 2009
The open-source Bro network intrusion detection system provides a flexible framework for high-performance traffic inspection. Bro's extensive application-layer analysis provides deep insight i…
Risk Assessment Standards Toolkit: Practical Guidance in Implementing Statements on Auditing Standards 104 Through 111: May 21, 2009

In March 2008, Cynthia Pierce and Stuart Miller co-presented a NACUBO Webcast titled "Understanding the Risk Assessment Audit Standards," referring to Statements on Auditing Standards 1…
Directions in Security Metrics Research: August 20, 2009

More than 100 years ago, Lord Kelvin insightfully observed that measurement is vital to deep knowledge and understanding in physical science. During the last few decades, researchers have made va…
Using Nontraditional Security Risk Assessments to Clearly Express Risk, Make Persuasive Budget Requests, and Showcase Positive Trends: October 30, 2008 | A session at the EDUCAUSE 2008 Annual Conference
Learn how Weill Cornell Medical College employs a nontraditional risk management methodology to accurately measure risk, build compelling and successful budget requests, and graphically illustrate …
The Cost of Preventing Breaches: November 4, 2009 | A session at the EDUCAUSE 2009 Annual Conference
We all know only too well that there are significant costs associated with both experiencing and preventing data breaches, and we are continually challenged with finding the right mix of people, pr…
The Career of the IT Security Officer in Higher Education: July 1, 2009

This ECAR occasional paper reports the result of a study designed to understand and document the attributes and responsibilities of the relatively new role of information security officer in high…
Leveraging Resources in Building Your Information Security Program: April 22, 2009 | A session at the Security 2009
This talk addresses key information security building blocks and how to leverage campus and other resources in developing and supporting these programs. Physical security, risk assessment and audit…
Improving Security Event Correlation and Analysis Using Intelligent Agents: April 22, 2009 | A session at the Security 2009
Attacks on computer resources are security events that are more complex and difficult to quickly and effectively collect, analyze, and respond to. This presentation will explain how the use of inte…

Research and Publications

Conferences and Events

Career Development

Focus Areas and Initiatives

Connect and Contribute

About EDUCAUSE