Security Risk Assessment and Analysis - 173 Resources

Overview

Assessment is an estimate of the harm to business likely to result from a security failure and the likelihood of such a failure occuring, given the threat environment and the measures in place to prevent a failure. Risk Analysis is the process of indentifying an organization's information resources, existing controls, security risks, and vulnerabilities; determining their magnitude; and indentifying areas needing safeguards. It establishes a potential level of damage in dollars and/or other assets.

Publications (70)

EDUCAUSE publications address a diverse range of professional challenges in higher education IT, from updates on current developments to explorations of important overarching issues. Listed below are the full range of research, reports and other publications that EDUCAUSE and its members have written about Security Risk Assessment and Analysis.

Keywords

• ‹‹
• 2 of 3
• ››

Item ID	Title	Resource Category	Pub Date	Views	Ranking
EPS177	Self-Service/Automated Security Vulnerability Assessment Program Thomas R. Davis Effective Practices	Community Recommendation	01/01/2003	1,492
EPS197	Lessons Learned from RIT’s First Security Posture Assessment James H. Moore Effective Practices	Community Recommendation	01/01/2004	1,806
EPS280	E-Commerce and the Cardholder Information Security Program (CISP) Connie J. Sadler Effective Practices	Community Recommendation	01/01/2005	2,556
EQM0541	Addressing Information Security Risk Mohammad H. Qayoumi and Carol Woody Articles, Papers, and Reports	EDUCAUSE Quarterly	01/01/2005	5,442
ERB0607	Surveying the Steps to a Secure Emory University Jay D. Flanagan Articles, Papers, and Reports	ECAR	03/28/2006	3,987
ERS0505	A Systematic, Comprehensive Approach to Information Security Dan Blum, with input from Fred Cohen Articles, Papers, and Reports	ECAR	07/06/2005	4,866
ERS0601	Making Business Sense of Information Security Dan Blum Articles, Papers, and Reports	ECAR	03/21/2006	4,136
SEC0421	Information Security Governance Assessment Tool EDUCAUSE/Internet2 Security Task Force Tools	Security Task Force	01/01/2004	6,858
CSD4980	Security Task Force Strategic Plan 2006-2007 : Making Progress on Data Protection, Risk Assessment, Incident Response and Business Continuity Plans and Guidelines	Security Task Force	06/20/2007	3,887
CSD5365	Risk Assessment Tools List Tools	Higher Education Information Security Council (formerly the Security Task Force)	03/14/2008	487
CSD3065	HIPAA Risk Assessment Inventory Workbook Articles, Papers, and Reports	Security Task Force	01/01/2004	5,053
CSD4455	Computer Incident Factor Analysis and Categorization (CIFAC) Project Final Report, Volume II: Corporate and Not-for-Profit Sample Virginia E. Rezmierski, Mark A. Bard, and Brady T. West Articles, Papers, and Reports	Security Task Force	01/01/2006	2,437
EPS171	Conducting a Preliminary Risk Analysis and Creating an IT Security Group and Policy George Lavender Effective Practices	Community Recommendation	01/01/2003	1,301
EPS199	Five-Year Rotating Audit Focus Based on Risk Assessment at Georgia Tech Philip W. Hurd Effective Practices	Community Recommendation	01/01/2004	1,192
EPS248	HIPAA Security Assessment Eric Schmidt Effective Practices	Community Recommendation	01/01/2004	1,424
EQM0527	The “Zen” of Risk Assessment Cedric Bennett and, Richard Jacik Articles, Papers, and Reports	EDUCAUSE Quarterly	01/01/2005	4,488
ERB0624	Local IT Security for Colleges, Schools, and Departments: A Higher Education Perspective Derek Spransy Articles, Papers, and Reports	ECAR	12/05/2006	2,859
CSD5022	Committee Holds Hearing on Inadvertent File Sharing over Peer-to-Peer Networks Government Documents, Laws, Testimonies or Reports	Community Recommendation	07/24/2007	2,615
CSD5127	Why File Sharing Networks Are Dangerous Dan McGuire, M. Eric Johnson, and Nicholas D. Willey Articles, Papers, and Reports	Community Recommendation	09/10/2007	3,262
CSD5144	Incident Management Capability Metrics Certification, Education, Training and Tutorials		09/19/2007	2,563
CSD4510	Data Privacy: What We Can Learn From the Suits Joseph C. Panettieri Articles, Papers, and Reports	Community Recommendation	01/01/2006	2,370
CSD4544	Server hack at Georgetown University probed Jaikumar Vijayan Articles, Papers, and Reports	Community Recommendation	01/01/2006	2,827
CSD4554	Open-source bugs undermine digital signatures Joris Evers Articles, Papers, and Reports	Community Recommendation	01/01/2006	2,143
CSD4581	Incident Response at UT Austin Mary Grush Articles, Papers, and Reports	Community Recommendation	01/01/2006	2,409
ESI06A	CHEMA Looks at the Future of Higher Education, 2006 ECAR Surveys	ECAR	01/30/2006	2,603

• ‹‹
• 2 of 3
• ››

Presentations (75)

Stepping away from the distractions of normal routine to meet with peers, share experiences, and learn together can be invaluable. EDUCAUSE places great emphasis on the face-to-face meeting experience, offering you numerous opportunities throughout the year to gather with colleagues - from small regional events and special topic meetings to large, national conferences covering the full spectrum of roles and issues important to higher education. For more information on EDUCAUSE conferences and seminars, please see our Frequently Asked Questions page. Listed below is the full range of presentations EDUCAUSE and its members tagged with Security Risk Assessment and Analysis

Keywords

• ‹‹
• 2 of 3
• ››

Item ID	Title	Resource Category	Pub Date	Views	Ranking
EDU06286	IT Security in Higher Education: A Sea Change Robert B. Kvavik and John Voloudakis Presentations/Speeches	EDUCAUSE Annual	10/11/2006	1,943
NCP0643	The Business of Identity Management Steven L. Worona Presentations/Speeches	NERCOMP	03/21/2006	2,744
SEC07075	Effective Security Metrics Matt Tolbert Presentations/Speeches	Security Professionals Conference	04/11/2007	2,472
SEC07097	Incident Tracking and Reporting Joshua Beeman, Kathy Bergsma Presentations/Speeches	Security Professionals Conference	04/12/2007	2,393
CSD4603	What Every CBO Should Know About IT Security Robert N. Clark, Jr. and John J. Suess Presentations/Speeches	Security Task Force	01/01/2006	2,272
EDU06165	Effective IT Security Practices John Bruggeman, H. Morrow Long, and Christopher Misra Presentations/Speeches	EDUCAUSE Annual	10/09/2006	3,114
ESEM071	A Blueprint for Handling Sensitive Data: Security, Privacy, and Other Considerations H. Morrow Long and Krizi Trivisani Presentations/Speeches	Security Task Force	01/01/2007	2,206
LIVE041	Balancing the Need for Security and Open, Collaborative Networking John Voloudakis and Jack J. Suess Presentations/Speeches	Web Seminars EDUCAUSE	01/01/2004	4,759
LIVE0617	Going Beyond Recovery to Continuity: Lessons Learned David Swartz Presentations/Speeches	Web Seminars EDUCAUSE	01/01/2006	2,014
MAC0337	Creating a Secure University: Technology, Policies, Education, and Culture Joy R. Hughes and Randy Marchany Presentations/Speeches	Mid-Atlantic Regional	01/01/2003	6,254
NCP07037	A Blueprint for Handling Sensitive Data: Security, Privacy, and Other Considerations David Escalante, H. Morrow Long Presentations/Speeches	NERCOMP	03/19/2007	2,470
SEC07029	Secrets of Superspies Ira Winkler Presentations/Speeches	Security Professionals Conference	04/11/2007	2,504
SEC07082	Security Risk Management Medley: Assessment Methodologies and Operational Perspectives Brad Judy, Joshua Mauk, Thomas Siu Presentations/Speeches	Security Professionals Conference	04/11/2007	2,385
SEC07083	Making the Campus Web Safer, One Application at a Time PJ Abrams, Diane Gierisch Presentations/Speeches	Security Professionals Conference	04/11/2007	1,554
SER06048	Giving the Heave-Ho to Worms, Spyware, and Bots! Tammy L. Clark and William Monahan Presentations/Speeches	Southeast Regional	06/19/2006	1,932
SPC0547	What Does Privacy Have to Do with IT? Privacy Risk Assessment Tracy Mitrano, Doris R. Kirby, and Leslie Maltz Presentations/Speeches	Security Professionals Conference	04/04/2005	3,750
SPC0693	Staying Out of the Security Headlines David Escalante and Cathy Hubbs Presentations/Speeches	Security Professionals Conference	04/12/2006	2,264
WRC0667	Are Security and Quality Assurance Part of Your Software Development Life Cycle? Marina Arseniev, Josh Drummond and Carmen Roode Presentations/Speeches	Western Regional conferences	04/25/2006	2,424
CYB07007	Information Systems Under Attack: Managing Enterprise Risk Ronald Ross Presentations/Speeches	Cybersecurity Summit	02/22/2007	2,556
EAF0619	Credentialing, Levels of Assurance, and Risk: What's Good Enough? Michael Conlon and R.L. Morgan Presentations/Speeches	EDUCAUSE Grant Programs (CAMP)	02/09/2006	2,730
EDU0312	Information Security Risk Evaluation for Colleges and Universities Christopher Alberts and Carol Woody Presentations/Speeches	EDUCAUSE Annual	01/01/2003	4,888
EDU03136	Defining Risk and Fixing the Top 20: Security 101 for a Small School John Bruggeman Presentations/Speeches	EDUCAUSE Annual	01/01/2003	4,793
LIVE0615	Trends in Malicious Code on the Internet Andrew J. Czyzewski and Vincent J. Rowe Presentations/Speeches	Web Seminars EDUCAUSE	01/01/2006	2,166
MWR0654	Risk Assessment 101 Kelley L. Bradder Presentations/Speeches	Midwest Regional	03/13/2006	2,516
MWR0675	RINGS Open Source Device Registration and Security Dustin Brown Presentations/Speeches	Midwest Regional	03/14/2006	2,401

• ‹‹
• 2 of 3
• ››

Policies (1)

Keywords

Item ID	Title	Resource Category	Pub Date	Views	Ranking
CSD4951	IT Risk Methodology & Incident Severity Brian Basgen Policies and Procedures	Community Recommendation	06/11/2007	1,898

Podcasts (8)

Name	Views	Post date
Podcast: The FTC as an Educational Partner in Improving Data Security and Privacy   Play | Show Notes | Download (25.88 MB audio/mpeg)	163	05/19/2008
Podcast: Addressing Complex Security Threats Through Risk Management   Play | Show Notes | Download (27.64 MB audio/mpeg)	433	05/16/2008
E07 Podcast: An Interview with Cedric Bennett - Security Concerns and Risk Management   Play | Show Notes | Download (13.65 MB audio/mpeg)	908	11/01/2007
E07 Podcast: Bruce Schneier on Information Security: Ten Trends   Play | Show Notes | Download (34.17 MB audio/mpeg)	5,695	10/31/2007
2007 Enterprise Conference: The Adaptable University   Play | Show Notes | Download (38.17 MB audio/mpeg)	3,433	06/15/2007
EDUCAUSE2006 Podcast: How to Successfully Defend   Play | Show Notes | Download (33.74 MB audio/mpeg)	3,639	03/31/2007
E2005 Podcast: Security Assessments for Information Technology   Play | Show Notes | Download (24.82 MB audio/mpeg)	4,138	04/05/2006
E2005 Podcast: A Successful Tool to Create Positive Change   Play | Show Notes | Download (24.28 MB audio/mpeg)	3,681	03/28/2006

Blogs (20)

EDUCAUSE hosts a number of blogs for its members. To view a list of all our blogs, click here.

Title	Blogger	Posted	Views
SANS: The Top Cyber Security Risks	Valerie M. Vogel, EDUCAUSE	09/29/2009	92
Tune In July 8: Information Security from the Ground Up	Valerie M. Vogel, EDUCAUSE	07/01/2009	81
ECAR Publishes New Occasional Paper on IT Security Officer Careers	Valerie M. Vogel, EDUCAUSE	07/01/2009	107
Tune In July 8: Information Security from the Ground Up	Peggy Kurkowski, EDUCAUSE	06/30/2009	239
NIST Publishes Final Version of the Guide to Enterprise Telework and Remote Access Security	Valerie M. Vogel, EDUCAUSE	06/16/2009	142
Consensus Audit Guidelines Version 1.0 Released	Valerie M. Vogel, EDUCAUSE	03/24/2009	723
Register Now for the 2009 Security Professionals Conference to Save with Low Rates	Colleen Luckett, EDUCAUSE	02/06/2009	671
Security Task Force 2008–2009 Strategic Plan: "Safeguarding Our IT Assets, Protecting Our Community's Privacy"	Valerie M. Vogel, EDUCAUSE	09/08/2008	368
EDUCAUSE Summit: The Role of IT in Campus Security and Emergency Management	Carie Page, EDUCAUSE	08/15/2008	255
New Risk Assessment Resources Available	Valerie M. Vogel, EDUCAUSE	03/14/2008	343
EDUCAUSE Security Conference: Incident Tracking and Reporting	Lida L. Larsen, EDUCAUSE	04/20/2007	4,943
EDUCAUSE Security Conference: Secrets of Superspies	Lida L. Larsen, EDUCAUSE	04/17/2007	3,658
New Managers Training and Data Security--Two Seminars Coming in June	Colleen Luckett, EDUCAUSE	04/05/2007	3,867
Business Continuity Planning at George Mason University	Valerie M. Vogel, EDUCAUSE	09/13/2006	4,129
Tune In September 6: Going Beyond Recovery to Continuity: Lessons Learned	Colleen Luckett, EDUCAUSE	08/29/2006	3,785
CIFAC Project Final Report (Vol. 2) Released	Valerie M. Vogel, EDUCAUSE	08/18/2006	3,811
Tune In August 2: Trends in Malicious Code on the Internet	Colleen Luckett, EDUCAUSE	07/26/2006	4,506
EDUCAUSE Enterprise 2006. Summary: Enterprise-wide Security	Lida L. Larsen, EDUCAUSE	06/07/2006	3,848
EDUCAUSE Security Professionals Conference 2006. Summary:System-wide Strategies for Achieving IT Security at Univ. of California	Lida L. Larsen, EDUCAUSE	04/25/2006	4,125
Risk Assessment Framework	Valerie M. Vogel, EDUCAUSE	01/09/2006	4,663