EDUCAUSE Review Articles, Security Management, and Data Security

"When is higher education going to get serious about safeguarding the private information of students,
faculty, and staff?"

By adopting a unified approach to information security compliance, higher education institutions not only can effectively satisfy the requirements of the growing number of state and federal laws and industry regulations but also can address identified risks and improve the security of their information assets.

U.S. colleges and universities possess an exceptional volume and variety of personal information about students, employees, and others, yet they continue to lag behind industry, government, and higher education institutions in other countries in voluntarily protecting that information.