EDUCAUSE | Documents Contributed by ECAR, Incident Handling and Response, and Cybersecurity Policy

The Virginia Alliance for Secure Computing and Networking (VA SCAN): A Statewide Collaborative IT Security Resource

drupal — Tue, 17 Oct 2006 16:27:14 -0500

This case study examines ways in which the Virginia Alliance for Secure Computing and Networking (VA SCAN) provides a blueprint for higher education institutions interested in collaboratively providing openly accessible IT security resources. VA SCAN is a partnership among five Virginia state higher education institutions and three IT security research programs that provide a repository of IT security tools, training, and consultative services to Virginia higher education institutions. All of the resources are available for free or on a cost-recovery basis. The case study was undertaken as part of ECAR's 2006 study of information technology security practices in higher education, which included a literature review, quantitative and qualitative date from 492 higher education institutions in the U.S. and Canada, input from IT security leaders and specialists, and three case studies.

Baylor University's IT Security Risk Assessment Program

drupal — Tue, 03 Oct 2006 16:04:38 -0500

This case study examines Baylor University's risk assessment program for information technology security, which was established in the face of the escalating demands that security places on information technology organizations. The case study was undertaken as part of ECAR's 2006 study of information technology security practices in higher education, which included a literature review, quantitative and qualitative date from 492 higher education institutions in the U.S. and Canada, input from IT security leaders and specialists, and three case studies.

Information Technology Security: Governance, Strategy, and Practice in Higher Education Roadmap

drupal — Thu, 23 Sep 2004 17:26:12 -0500

U.S. higher education institutions have historically enjoyed a culture of open access to information. The free flow of information faces increasing challenges as concerns about information security continue to mount. This study examines how higher education is coping with the growing cost of information technology security and with the tensions between preserving confidentiality, ensuring data integrity, and maintaining an academic environment in which information is easily available to authorized users.
ECAR Roadmaps synthesize important information technology issues and provide recommendations for action in higher education. The content draws from ECAR research studies and case studies.

Information Technology Security: Governance, Strategy, and Practice in Higher Education Key Findings

drupal — Wed, 30 Jun 2004 18:53:54 -0500

IT Security: The State of the Practice in Higher Education

drupal — Mon, 17 Nov 2003 11:39:21 -0600

In the spring of 2003, the EDUCAUSE Center for Applied Research (ECAR) launched a major study of IT security in higher education. Nearly 500 colleges and universities responded to the ECAR quantitative survey, and several institutions were profiled in depth. The survey also incorporated IT security surveys from a variety of external sources, making possible interesting comparisons of security practices in academe and out. This study and session also incorporate substantial qualitative information and insights gleaned from detailed case studies of MIT, Indiana University, and the University of Washington.

This presentation was also given at the 2003 ECAR Symposium.

Information Technology Security Policy: Keys to Success

drupal — Thu, 30 Oct 2003 14:07:47 -0600

This bulletin examines how higher education is coping with managing information technology security from the policy perspective. It focuses particular attention on policy processes and programs that address the tensions between preserving confidentiality, ensuring data integrity, and maintaining an academic environment in which information is easily available to authorized users.

Information Technology Security at Indiana University

drupal — Mon, 13 Oct 2003 16:08:42 -0500

This case study is a companion to the 2003 ECAR research study "Information Technology Security: Governance and Strategy in Higher Education." This study examines how information technology security is being practiced in higher education today, addressing topics such as incident management, preserving confidentiality, ensuring data integrity, and maintaining an academic environment in which information is easily available to authorized users.

Information Technology Security at MIT

drupal — Mon, 13 Oct 2003 16:14:38 -0500

Information Technology Security at the University of Washington

drupal — Mon, 13 Oct 2003 16:17:50 -0500

Information Technology Security: Governance, Strategy, and Practice in Higher Education

drupal — Mon, 13 Oct 2003 15:43:17 -0500

U.S. higher education institutions have historically enjoyed a culture of open access to information. The free flow of information faces increasing challenges as concerns about information security continue to mount. This study examines how higher education is coping with the growing cost of information technology security and with the tensions between preserving confidentiality, ensuring data integrity, and maintaining an academic environment in which information is easily available to authorized users. The study reports the results of a quantitative survey of 435 higher education institutions as well as interviews with 42 technology executives, managers, and faculty members at 18 institutions. Companion publications include case studies on incident management and information technology security at six institutions.