Security Risk Assessment and Analysis - 173 Resources

Overview

Assessment is an estimate of the harm to business likely to result from a security failure and the likelihood of such a failure occuring, given the threat environment and the measures in place to prevent a failure. Risk Analysis is the process of indentifying an organization's information resources, existing controls, security risks, and vulnerabilities; determining their magnitude; and indentifying areas needing safeguards. It establishes a potential level of damage in dollars and/or other assets.

Publications (70)

EDUCAUSE publications address a diverse range of professional challenges in higher education IT, from updates on current developments to explorations of important overarching issues. Listed below are the full range of research, reports and other publications that EDUCAUSE and its members have written about Security Risk Assessment and Analysis.

Keywords

•  
• 1 of 3
• ››

Item ID	Title	Resource Category	Pub Date	Views	Ranking
ECP0901	The Career of the IT Security Officer in Higher Education Marilu Goodyear, Gail Salaway, Mark R. Nelson, Rodney J. Petersen and Shannon Portillo Articles, Papers, and Reports	ECAR	07/01/2009	1,890
ERB0817	Information Security Governance: Standardizing the Practice of Information Security Tammy L. Clark and Toby D. Sitko Articles, Papers, and Reports	ECAR	08/19/2008	6,646
EPS302	Georgia State University's IT Procurement Review Process--Practical Approach to Assessing Risks of IT Projects Tammy L. Clark Effective Practices	Community Recommendation	10/02/2008	727
EPS303	Implementing Information Security Governance Using ISO 27000 Tammy L. Clark Effective Practices	Community Recommendation	10/02/2008	989
LIVE0912	Information Security from the Ground Up David Seidl		07/08/2009	227
CSD5737	Information Technology Sector Baseline Risk Assessment Government Documents, Laws, Testimonies or Reports	Community Contributions	08/28/2009	114
CSD5586	Information Technology Security Risk Management (ITS-RM) Program Programs and Projects		12/12/2008	720
CSD5587	Compliance Assessment Template Tools	Community Recommendation	09/24/2008	593
EQM0622	Current IT Issues Survey Report, 2006 Barbara I. Dewey, Peter B. DeBlois and the EDUCAUSE Current Issues Committee Articles, Papers, and Reports	EDUCAUSE Quarterly	01/01/2006	9,226
ESI08B	IT Security Officer Survey Marilu Goodyear Surveys	ECAR	04/09/2008	1,727
CSD5494	Security Task Force 2008–2009 Strategic Plan: Safeguarding Our IT Assets, Protecting Our Community’s Privacy Plans and Guidelines	Security Task Force	09/03/2008	916
EPS301	Whole Disk Encryption Evaluation and Deployment Jon Allen and Adam Sealey Effective Practices	Community Contributions	10/02/2008	517
EQM07313	Complete Guide to Security and Privacy Metrics: Measuring Regulatory Compliance, Operational Resilience, and ROI - Book Review Cheryl Washington Articles, Papers, and Reports	EDUCAUSE Quarterly	08/29/2007	6,189
ERM0653	A Unified Approach to Information Security Compliance M. Peter Adler Articles, Papers, and Reports	EDUCAUSE Review	01/01/2006	11,421
CSD5368	Information Risk Management Policy Template Plans and Guidelines	Security Task Force	03/17/2008	2,089
ERB0806	Managing IT Risk in Higher Education: A Methodology Ian D. Waters Articles, Papers, and Reports	ECAR	03/18/2008	3,178
CSD4380	Risk Management Framework EDUCAUSE/Internet2 Computer and Network Security Task Force Risk Assessment Working Group Tools	Security Task Force	01/01/2006	11,333
CSD4889	Georgia State University System Security Plan Tammy L. Clark, William Monahan Plans and Guidelines	Community Recommendation	01/01/2006	2,476
ECS0606	Most Improved: How Four Institutions Developed Successful IT Security Programs Judith A. Pirani and Donald Z. Spicer Articles, Papers, and Reports	ECAR	11/03/2006	2,898
EQM05112	Defend IT: Security by Example - Book Review Reviewed by Gary Dobbins Articles, Papers, and Reports	EDUCAUSE Quarterly	01/01/2005	4,482
CSD5366	Information Security Risk Assessment Consultants List Vendors	Security Task Force	03/14/2008	359
ERS0606	Safeguarding the Tower: IT Security in Higher Education 2006 Robert B. Kvavik, with John Voloudakis Articles, Papers, and Reports	ECAR	10/12/2006	4,568
ECM0606	Safeguarding the Tower: IT Security in Higher Education 2006 Roadmap Robert B. Kvavik Articles, Papers, and Reports	ECAR	10/12/2006	2,559
EKF0606	Safeguarding the Tower: IT Security in Higher Education 2006 – Key Findings Judith Borreson Caruso Articles, Papers, and Reports	ECAR	10/12/2006	2,475
EPS145	Building an Information Security Practice Glenn C. Hill Effective Practices	Community Recommendation	01/01/2003	1,490

•  
• 1 of 3
• ››

Presentations (75)

Stepping away from the distractions of normal routine to meet with peers, share experiences, and learn together can be invaluable. EDUCAUSE places great emphasis on the face-to-face meeting experience, offering you numerous opportunities throughout the year to gather with colleagues - from small regional events and special topic meetings to large, national conferences covering the full spectrum of roles and issues important to higher education. For more information on EDUCAUSE conferences and seminars, please see our Frequently Asked Questions page. Listed below is the full range of presentations EDUCAUSE and its members tagged with Security Risk Assessment and Analysis

Keywords

•  
• 1 of 3
• ››

Item ID	Title	Resource Category	Pub Date	Views	Ranking
SEC09_170497	A Tour of the Security Task Force's IT Risk Management Framework Presentations and Seminars	Security Professionals Conference	04/22/2009	260
SEC09_170612	Novel Approaches to Developing Governance, Risk, and Compliance Programs Presentations and Seminars	Security Professionals Conference	04/23/2009	272
E08_177997	Using Nontraditional Security Risk Assessments to Clearly Express Risk, Make Persuasive Budget Requests, and Showcase Positive Trends Presentations and Seminars	EDUCAUSE Annual	10/30/2008	41
E08_47642	Security and Privacy Lightning Round Christopher Keslar, Michael A. Corn, Ryan Turner, Matt Tolbert, Chandragupta Gudena, David Stack, and Jamey Hansen Presentations/Speeches	EDUCAUSE Annual	10/30/2008	688
MARC09_48024	Performing Risk Analysis and Testing: Outsource or In-House? A Towson University Case Study Lynn Ray Presentations/Speeches	Mid-Atlantic Regional	01/07/2009	423
MWRC09_48481	Information Security from the Ground Up David Seidl Presentations/Speeches	Midwest Regional	03/23/2009	235
SEC09_170555	REN-ISAC and CSI2—The Security Event System Presentations and Seminars	Security Professionals Conference	04/22/2009	275
SEC09_170550	An Auditor's Perspective on Frameworks for Information Systems Security in Higher Education Presentations and Seminars	Security Professionals Conference	04/22/2009	244
SEC09_170502	Conducting Internal PCI DSS Assessments Presentations and Seminars	Security Professionals Conference	04/22/2009	274
SEC09_171021	Leveraging Resources in Building Your Information Security Program Presentations and Seminars	Security Professionals Conference	05/03/2009	182
CYB09_179766	Intrusion Detection: Getting to Know Bro Presentations and Seminars	Cybersecurity Summit	09/14/2009	75
PKI08006	PKI and LOA: It's Probably Not What You Think Stefan Wahe and David L. Wasley Presentations/Speeches	PKI Meetings (Archives)	04/16/2008	147
SEC08054	Building a Risk-Based Information Security Program Michael Chapple Presentations/Speeches	Security Professionals Conference	05/04/2008	266
SEC08059	Dartmouth Cyber-Security Initiative and the New Achilles Vulnerability Assessment Console: A Case Study in Collaboration Adam Goldstein, Scott A. Rea, and David Bucciero Presentations/Speeches	Security Professionals Conference	05/04/2008	245
SEC08070	A Web Tool to Assist Risk Assessment at the University of Florida Kathy Bergsma Presentations/Speeches	Security Professionals Conference	05/04/2008	444
SEC08075	Using Nontraditional Security Risk Assessments to Measure Risk, Request Budgets, and Illustrate Trends Benjamin Nathan Presentations/Speeches	Security Professionals Conference	05/04/2008	346
SEC08008	Addressing Complex Security Threats Through Risk Management Rebecca Whitener Presentations/Speeches	Security Professionals Conference	05/04/2008	615
EDU07210	Stop, Drop, and Roll: Prevent and Douse Cyber Incidents Cedric Bennett, Susan A. Blair, and Kathleen Roberts Presentations/Speeches	EDUCAUSE Annual	10/23/2007	731
EDU07237	GSU's Roadmap for a World-Class Information Security Management System: ISO 27001:2005 Tammy L. Clark and William Monahan Presentations/Speeches	EDUCAUSE Annual	10/23/2007	1,314
CAMP08115	Appropriate Access: Levels of Assurance Stefan Wahe and David L. Wasley Presentations/Speeches	EDUCAUSE Grant Programs (CAMP)	02/13/2008	768
EDU07330	Lassoing the Beast: How a Large, Diverse University Is Wrapping Its Arms Around Confidential Data Donna M. Milici, Jim Cunningham, and Maura Johnston Presentations/Speeches	EDUCAUSE Annual	10/23/2007	640
SEC07081	ERP Risks, Security Checklist, and Priorities for Change Joy R. Hughes Presentations/Speeches	Security Professionals Conference	04/11/2007	2,603
SEC07093	Developing a University Systemwide Information Security Roadmap Cedric Bennett, Janice Lim Presentations/Speeches	Security Professionals Conference	04/11/2007	3,136
SER07059	Developing a Risk-Based Information Security Program Tammy L. Clark and William Charles Monahan Presentations/Speeches	Southeast Regional	06/11/2007	2,453
ECR0605	Safeguarding the Tower: IT Security in Higher Education 2006 Robert B. Kvavik and John Voloudakis Presentations/Speeches	ECAR	10/11/2006	2,404

•  
• 1 of 3
• ››

Policies (1)

Keywords

Item ID	Title	Resource Category	Pub Date	Views	Ranking
CSD4951	IT Risk Methodology & Incident Severity Brian Basgen Policies and Procedures	Community Recommendation	06/11/2007	1,898

Podcasts (8)

Name	Views	Post date
Podcast: The FTC as an Educational Partner in Improving Data Security and Privacy   Play | Show Notes | Download (25.88 MB audio/mpeg)	163	05/19/2008
Podcast: Addressing Complex Security Threats Through Risk Management   Play | Show Notes | Download (27.64 MB audio/mpeg)	433	05/16/2008
E07 Podcast: An Interview with Cedric Bennett - Security Concerns and Risk Management   Play | Show Notes | Download (13.65 MB audio/mpeg)	908	11/01/2007
E07 Podcast: Bruce Schneier on Information Security: Ten Trends   Play | Show Notes | Download (34.17 MB audio/mpeg)	5,695	10/31/2007
2007 Enterprise Conference: The Adaptable University   Play | Show Notes | Download (38.17 MB audio/mpeg)	3,433	06/15/2007
EDUCAUSE2006 Podcast: How to Successfully Defend   Play | Show Notes | Download (33.74 MB audio/mpeg)	3,639	03/31/2007
E2005 Podcast: Security Assessments for Information Technology   Play | Show Notes | Download (24.82 MB audio/mpeg)	4,138	04/05/2006
E2005 Podcast: A Successful Tool to Create Positive Change   Play | Show Notes | Download (24.28 MB audio/mpeg)	3,681	03/28/2006

Blogs (20)

EDUCAUSE hosts a number of blogs for its members. To view a list of all our blogs, click here.

Title	Blogger	Posted	Views
SANS: The Top Cyber Security Risks	Valerie M. Vogel, EDUCAUSE	09/29/2009	92
Tune In July 8: Information Security from the Ground Up	Valerie M. Vogel, EDUCAUSE	07/01/2009	81
ECAR Publishes New Occasional Paper on IT Security Officer Careers	Valerie M. Vogel, EDUCAUSE	07/01/2009	107
Tune In July 8: Information Security from the Ground Up	Peggy Kurkowski, EDUCAUSE	06/30/2009	239
NIST Publishes Final Version of the Guide to Enterprise Telework and Remote Access Security	Valerie M. Vogel, EDUCAUSE	06/16/2009	142
Consensus Audit Guidelines Version 1.0 Released	Valerie M. Vogel, EDUCAUSE	03/24/2009	723
Register Now for the 2009 Security Professionals Conference to Save with Low Rates	Colleen Luckett, EDUCAUSE	02/06/2009	671
Security Task Force 2008–2009 Strategic Plan: "Safeguarding Our IT Assets, Protecting Our Community's Privacy"	Valerie M. Vogel, EDUCAUSE	09/08/2008	368
EDUCAUSE Summit: The Role of IT in Campus Security and Emergency Management	Carie Page, EDUCAUSE	08/15/2008	255
New Risk Assessment Resources Available	Valerie M. Vogel, EDUCAUSE	03/14/2008	343
EDUCAUSE Security Conference: Incident Tracking and Reporting	Lida L. Larsen, EDUCAUSE	04/20/2007	4,943
EDUCAUSE Security Conference: Secrets of Superspies	Lida L. Larsen, EDUCAUSE	04/17/2007	3,658
New Managers Training and Data Security--Two Seminars Coming in June	Colleen Luckett, EDUCAUSE	04/05/2007	3,867
Business Continuity Planning at George Mason University	Valerie M. Vogel, EDUCAUSE	09/13/2006	4,129
Tune In September 6: Going Beyond Recovery to Continuity: Lessons Learned	Colleen Luckett, EDUCAUSE	08/29/2006	3,785
CIFAC Project Final Report (Vol. 2) Released	Valerie M. Vogel, EDUCAUSE	08/18/2006	3,811
Tune In August 2: Trends in Malicious Code on the Internet	Colleen Luckett, EDUCAUSE	07/26/2006	4,506
EDUCAUSE Enterprise 2006. Summary: Enterprise-wide Security	Lida L. Larsen, EDUCAUSE	06/07/2006	3,848
EDUCAUSE Security Professionals Conference 2006. Summary:System-wide Strategies for Achieving IT Security at Univ. of California	Lida L. Larsen, EDUCAUSE	04/25/2006	4,125
Risk Assessment Framework	Valerie M. Vogel, EDUCAUSE	01/09/2006	4,663