Presented at EDUCAUSE Annual Conferences, Incident Handling and Response, and Presentations/Speeches

The higher education community faces increasingly difficult issues of security in a networked world, compounded by the demands of advanced applications. Performance requirements (high bandwidth, end-to-end transparency, new protocols) are essential for the academic mission and innovation, but are not easily accommodated in current approaches to network security. The Salsa group is forging new frontiers to address these issues.

The focus on information security at Embry-Riddle Aeronautical University, as in many institutions, has evolved gradually over a number of years. Beginning with what can best be described as ad hoc initiatives driven by afterthought oversight, the university's focus on information security is maturing into a formalized, integrated business component and directive.

Presenting two best-practice models for cyber incidents: To prevent cyber incidents, learn how to use an uncomplicated cyber risk assessment to help you focus your institution's limited resources. When an incident occurs, know how to douse the effect of breach events when notification is required.

In the spring of 2003, the EDUCAUSE Center for Applied Research (ECAR) launched a major study of IT security in higher education. Nearly 500 colleges and universities responded to the ECAR quantitative survey, and several institutions were profiled in depth. The survey also incorporated IT security surveys from a variety of external sources, making possible interesting comparisons of security practices in academe and out. This study and session also incorporate substantial qualitative information and insights gleaned from detailed case studies of MIT, Indiana University, and the University of Washington.

This presentation was also given at the 2003 ECAR Symposium.