EDUCAUSE Review Articles, Cybersecurity, and Security Implementation

By adopting a unified approach to information security compliance, higher education institutions not only can effectively satisfy the requirements of the growing number of state and federal laws and industry regulations but also can address identified risks and improve the security of their information assets.

To protect information assets and contribute to the security of critical infrastructures, colleges and universities must empower an individual, such as the Chief Security Officer, or a team with the authority, the resources, and the support needed to effectively maintain an information security program.

In the past three years, higher education institutions have made a number of moves to secure their critical systems and protect their users, resulting in a marked change in the techniques used to combat security threats. Today, continued progress may depend on the development of an enterprise IT security program.