New Risk Assessment Resources Available

vvogel — Fri, 14 Mar 2008 11:57:10 -0500

The Security Task Force Risk Assessment Working Group wishes to inform higher education information security practioners of a few recent resource updates which are now available from the Risk Management section of the IT Security Guide.

The Information Security Risk Assessment Consultants list provides a listing of vendors known to have conducted some form of IS risk assessment for at least one higher education institution. The only way a vendor can get onto this list is to be placed there by an EDUCAUSE member institution that has engaged the consultant. Each entry on this list provides a link to the institution which has provided the vendor reference. The list can be a starting place for schools that are seeking a consultant; referencing institutions may be willing to provide additional information about the vendor and the consulting engagement when asked.

The list of Risk Assessment Tools provides links to various tools which can aid with a risk assessment. The tools are a mix of some sold or licensed by vendors, some provided by colleague institutions, and some from associations or standards groups.

The existing PDF version of the Information Security Governance (ISG) Self Assessment Tool for Higher Education has been enhanced by the addition of a Microsoft Excel version which (1) separates each section onto individual worksheets for increased flexibility of analysis and entry and (2) provides for automatic summarization on the separate scoring worksheet.

We hope you find this information useful. If you are able to provide additional information or references for the Risk Assessment Consultants list or the Risk Assessment Tools list, please send an e-mail to the Security Task Force.

EDUCAUSE | EDUCAUSE CONNECT - New Risk Assessment Resources Available - Comments

New Risk Assessment Resources Available