Documents Contributed by ECAR, Security Management, and Viruses and Worms

This bulletin discusses some of the lessons learned by the Emory College, Faculty of Arts and Sciences, in developing its information technology security strategy, as well as what other schools grappling with security should consider when implementing a local security strategy. Research in this bulletin is drawn from the experiences of the Emory College, along with interviews of IT lead personnel from five of Emory's graduate and undergraduate schools: the School of Law, the School of Nursing, the School of Medicine, the School of Public Health, and the School of Business.

This bulletin is a companion to Campus IT Security: Governance, Strategy, Policy, and Enforcement, ECAR's 2006 bulletin (No. 17) by the same authors. Security technologies provide various types of protection to the campus, including technologies that secure the network, control access, encrypt data, facilitate backups, provide virus protection, and supply enterprise directory services. This research bulletin focuses on the emerging set of technologies that fall under the broad category of identify management. It is based on a literature review, campus interviews, and the firsthand experience of the authors.

This research bulletin summarizes how Emory University used the results of a security survey of higher education institutions to make important, peer-informed decisions on how to secure and protect its computing environment. It includes an analysis of the statistical information they gathered and details about the security initiatives they implemented after compiling and reviewing survey results.