Re: IHEs & NATIONAL STRATEGY: Single Point-Of-Contact

[Kevin Shalla <Kevin.Shalla () IIT EDU>]

I guessing here on what this means, but it sound like some other
organization does triage before it gets to a specific university -
correct?  Definitions please for ISAC, MOU, REN-ISAC.

At 10:55 AM 9/23/2002 -0500, Mark S. Bruhn wrote:
> A 24X7 higher education ISAC will help here, I think.  The people
> staffing such an org will know the higher education community, and will
> be technically able to triage incident reports.  The first
> limited-service iteration of a higher education ISAC (for Research and
> Educational Networking) will be at Indiana University, associated with
> the Global Network Operations Center, which is already 24X7.  See
> http://globalnoc.iu.edu/.  We are poised (legal people doing final
> review) to sign an MOU with the NIPC.
>
> Whilst we certainly don't want to publish home numbers widely to law
> enforcement and ISPs, having a higher education ISAC with that
> information shouldn't (at least in my opinion) be problematic.  If a
> report or situation associated with a particular campus is bad enough,
> the ISAC operators would attempt to contact the person(s)identified for
> that campus.
>
> The theory here is that ISPs (as members of the IT ISAC) and law
> enforcement (as part of the law enforcement ISAC) will make reports to
> the NIPC, as well as directly to other ISACs if warranted.  The NIPC
> will pass that along to the other ISACs.  The REN-ISAC will take that
> information, do some analysis, and make sure it gets to the campuses
> that need to have it.  Or, to all campuses for which they have contact
> information, if it's a more global threat.
>
> Operational details of the REN-ISAC will be sent out widely, once they
> are developed.  There is also a white paper that discusses a
> full-service ISAC that may (should absolutely, I think) succeed the
> REN-ISAC.  We will post that to the Task Force web site as soon as I can
> discuss that with Rodney Petersen.


Kevin Shalla
Manager, Student Information Systems
Illinois Institute of Technology
<mailto:Kevin.Shalla () iit edu>

**********
Participation and subscription information for this EDUCAUSE Discussion Group discussion list can be found at 
http://www.educause.edu/memdir/cg/.