EDUCAUSE | EDUCAUSE Quarterly Articles and Security Risk Assessment and Analysis

Complete Guide to Security and Privacy Metrics: Measuring Regulatory Compliance, Operational Resilience, and ROI - Book Review

ckeller — Thu, 30 Aug 2007 11:36:39 -0500

The reviewer states the "Complete Guide to Security and Privacy Metrics is a good reference book for individuals developing or managing metrics for performance management programs." This book has more than 900 ready-to-use metrics designed to measure the following;

Compliance with current security and privacy regulations and standards
Operational resilience of physical, personnel, IT, and operational controls
Return on investment (ROI) on controls used to manage risk of information and IT assets

Defend IT: Security by Example - Book Review

drupal — Thu, 22 Jun 2006 16:41:09 -0500

Gary Dobbins offers a review of the sixteen case studies on creating and maintaining effective IT security found in Defend IT: Security by Example. Multiple aspects of IT security programs such as disaster planning, wireless networks, and virus outbreaks, are highlighted in this book.

Current IT Issues Survey Report, 2006

drupal — Mon, 17 Apr 2006 11:59:25 -0500

Security and Identity Management edges out Funding IT as the top strategic challenge, while Disaster Recovery/Business Continuity reemerges.

Addressing Information Security Risk

drupal — Thu, 10 Nov 2005 17:12:02 -0600

A journey, not a destination, security work is never done—the challenges just keep coming.

The “Zen” of Risk Assessment

drupal — Mon, 25 Apr 2005 16:18:00 -0500

The time and resources needed for proper risk assessment can be mitigated and the benefits magnified by making assessment an ongoing, rule-based process.

Mitigating Security Issues: The University of Memphis Case

drupal — Tue, 29 Jul 2003 15:00:45 -0500

A comprimised server at the University of Memphis highlighted the security risks faced by complicated systems on campus.