IT Compliance Framework for Institutions of Higher Ed

Institutions of higher education are increasingly expected to comply with various regulatory requirements specifically focused at data privacy and protection. Sometimes there could be overlap in effort that can be avoided if a university-wide IT compliance framework is implemented to ensure compliance at a high level with applicable federal and industry regulations such as FERPA, HIPAA, GLBA, the Red Flags Rule, and PCI DSS. New Mexico State University has developed an IT compliance framework mode. We'll share our lessons learned and this model to help other institutions benchmark their IT compliance efforts.