EDUCAUSE | Presented at EDUCAUSE Annual Conferences and Data Security

Lassoing the Beast: How a Large, Diverse University Is Wrapping Its Arms Around Confidential Data

drupal — Tue, 06 Nov 2007 11:04:19 -0600

Penn designed the security and privacy impact assessment (SPIA) process and tool to raise awareness about where confidential data reside and to assess risks in seven major threat areas, which can be mitigated by a list of safeguards. Learn about successful outcomes from our early SPIA adopters.

Chaos to Clarity: Consolidate Your Security Information into a Knowledge Base

drupal — Fri, 02 Nov 2007 16:56:47 -0500

Maintaining spreadsheets on server configurations, firewalls, and personal identity data, each with redundant and inconsistent information, is outmoded in today's security climate. This presentation will demonstrate using Protégé, an open source ontology and knowledge-base tool, to intelligently capture and maintain comprehensive enterprise security information in a single repository.

PCI Compliance in the University Setting

drupal — Fri, 02 Nov 2007 16:56:47 -0500

In 2004, Visa and MasterCard collaboratively developed the Payment Card Industry Data Security Standard (PCI DSS) to create common industry security requirements. This session will share the campus perspectives and approaches of Washington State University and the University of Washington in addressing the standard.

Bruce Schneier on Information Security: Ten Trends - Sponsored by AT&T, An EDUCAUSE Silver Partner

drupal — Tue, 30 Oct 2007 13:42:34 -0500

Surveying current trends in information security, it’s clear that a myriad of forces are at work. But fundamentally, security is all about economics: both attacker and defender are trying to maximize the return on their investments. Economics can both explain why security fails so often and offer new solutions for its success. For example, often the people who could protect a system are not those who suffer the costs of failure. Changing these economic incentives will do more to improve security than will more technology.

GSU's Roadmap for a World-Class Information Security Management System: ISO 27001:2005

drupal — Tue, 30 Oct 2007 13:42:38 -0500

Georgia State University is one of the first universities to embrace the ISO 27001:2005 standard for establishing an information security management system (ISMS). A systematic and disciplined approach helps us leverage technology to develop a world-class ISMS that empowers users and improves processes. This session will discuss the importance of developing a comprehensive, risk-management based information security program.

Information Security: Zero to 60 in 10 Years

drupal — Tue, 30 Oct 2007 13:42:38 -0500

The focus on information security at Embry-Riddle Aeronautical University, as in many institutions, has evolved gradually over a number of years. Beginning with what can best be described as ad hoc initiatives driven by afterthought oversight, the university's focus on information security is maturing into a formalized, integrated business component and directive.

Secure Data Exchange

drupal — Tue, 30 Oct 2007 13:42:31 -0500

How do you know that your data exchange is secure? Our campuses exchange data daily, much of it critical and confidential. Is your banking relationship supporting secure data exchange? How secure are your retirement file feeds? Can anyone on campus initiate data exchange? If so, are they trained to make the exchange secure? Discuss challenges and solutions for making data exchanges secure.

Whole Disk Encryption Evaluation and Deployment

drupal — Tue, 30 Oct 2007 13:42:38 -0500

Baylor University has spent two years working on a large-scale deployment of whole disk encryption. This session presents the process from selecting the encryption technology to the culminating deployment. The result is mitigation of data loss that can result from the loss or theft of a technology asset.

Enhancing Your Institution's Information Security

drupal — Wed, 18 Oct 2006 15:56:41 -0500

Join BearingPoint and several guests for an interactive discussion on enhancing your institution's information security through development of a standards-based enterprise security program. Topics include benefits of a programmatic approach, sources of standards, components of an effective program, and strategies to apply them to a higher education environment.

How to Successfully Defend Against IRC Bots, Compromises, and Information Leaks

drupal — Wed, 18 Oct 2006 15:56:51 -0500

IRC "bots," Trojan horses, rootkits, "zero day" threats, compromised PCs . . . sound familiar? These threats can result in sensitive data exposures, not to mention the hassles of remediating compromised systems. We will discuss how to implement effective solutions and practices and a distributed management strategy to prevent exploits, IRC bot attacks, and unauthorized access.