Educause Security Discussion mailing list archives
Re: number of IT security staff
From: Kathy Bergsma <kathya () NERSP NERDC UFL EDU>
Date: Fri, 11 Feb 2005 11:13:09 -0500
Thanks to everyone that responded and thanks to Julia V. Emko for compiling this summary of the responses. Rutgers University - 60,000 students - 30,000 nodes on the network - 6 full time, 2 part-time - Functions: Security Policy DMCA & copyright enforcement Incident response and reporting Security awareness Information Assurance & compliance (GLBA, HIPPA, etc) Centralized authentication Wright State University - 12,000 students - 2,000 full time faculty and staff - 1 full-time security person North Dakota State University - 12,000 students - 3,000 staff and faculty - 1 security person James Madison University - 15,000 students - 3 full-time security staff University of British Columbia - 40,000 students - 4 fulltime security staff Cal Stare Northridge - 38,000 students - 1 full time security person SWARTHMORE - 1500 students - 0 security staff State University of NY, POTSDAM - 4200 students - 0 security staff Northern Illinois University - 20,000 students - 3600 faculty and staff - 1 full time security staff - 1 part time clerk to do paperwork State University of NY College at Geneseo - 5500 students - 1 person who spend time on security University of Texas at Austin: - 70K affiliates (student/staff/faculty) - 2.5 Operational ISO Staffers - 3.0 Strategic ISO Staffers - 1.0 CISO Cornell University - 20,000 students, - 6 full-time security - use matrix organizations to do outreach, awareness, etc. DePaul University - 23,000 students - 3,000 staff - 2.5 full time security people University of West Florida - 10,000 students - 2200 faculty staff - 0 dedicated to security University of Georgia - 33,000 students 12,000 faculty and staff 1-BCP & Risk Mgmt. 1-Incident Response Coordination 1-Security Awareness, training and Education 1-Security Ops Center 1-Policy Mgmt 1-Desktop and User Security 2-Student workers Kansas State University - 23,000 students - 5,000+ full time faculty and staff - 1 full time security staff - 20-member incident response team (including reps) University of Minnesota - 65,000 students - 11 security team - Note that before I started working for our security team in March, 2003, there were six people on the team. Three people were hired in the last six months alone. Also note that several people in our team are in what some people would call less technical roles, such as scheduling vulnerability scans, handling abuse@ email, and PR stuff - roles that other institutions might have in different areas. However, the number (11) does not include financial or HR roles. (The folks in the less technical roles are not exactly non-technical folks though.) University of Wisconsin-Whitewater - 10,500 students - 1 security staff Alfred University - 2500 students - 1 fulltime security person California State University Stanislaus - 8000 students - 1 full time security staff Boston College - 12-16,000 students - 4000 faculty and staff - 2 full time security people Washington - 6 full time security employees - 3 students - 38,000 students (main campus) Swiss Federal Institute of Technology Zurich - 25,000 students - 8,000 staff members - 4 full-time people University of Pennsylvania - 25,00 students - 35,000 computers - 4 security employees - 1 temporary HIPPA consultant University of Chicago - 14,000 students - 14,500 faculty and staff - 4 full time security people University of California Riverside - 17,000 students - 2 full-time security - 1 part time policy person - 1 student helper University of Maryland - 35,000 students - 1 director - 3 to-come (1 currently) technical assistants - 1 part-time - 2 grad students University of Auckland - 30,000 students - 2 full time - 1 part-time Indiana University (all campuses) - 126,000 students, faculty and staff - 10 fulltime security people Portland State University - 25,000 students - 1 full time security officer - 1 part time student analyst Texas A&M University - 43,000 students - 3 full time - 1 open position University of Notre Dame - 10,000 students - about 3,000 faculty and staff - 1 director - 3 (to come), 1 (currently) technical staff University of Tennessee (all campuses) - 27,300 students - 1 security officer - 1 director - 6 fulltime security analysts - 2 student workers Grace College - 1100 students - 1 full time security (only 30% toward security staff) Monash University - 50,000 students - 5000 students - 4 IT security staff - 1 disaster recover/business continuity expert University of Wisconsin . Madison - 40,000 students - 15,000 faculty and staff - 6 in security department - 8 more volunteers for BadgIRT - 5 HIPAA components have 1 person on security University of North Florida - 14,500 students - 1 full time security person Florida State University - 3 dedicated security staff positions - 37,000 students University of Iowa - 30,000 students - 1 IT Security Officer - 1 Senior Security Analysts - 1 Security Analysts - .5 Student security analyst Southern Illinois Unviersity - 34,000 students - 2 full time security - 1 student worker - 1 GA Penn State - 81,000 students - 21,000 students - 1 security director - 1 forensics/litigation - 6 incident response - training, marketing, and PR - also, a complete marketing team for the ITS department University of California . Berkely - 33,000 students - 1 security officer - 6 security staff University of Virginia - 23,341 students - University of Arizona - 36,661 students - 1 director/manager - 3 security incident response - 2 software developers Purdue University - 40,000 students - 1 Identity Access Management - 1 Security Services - 1 Education and Communication - 1 Special Projects and Policy - 1 Research and Collaboration University of Delaware - 21,000 students - 3,685 employees - 7 security team members New York University - 37,000 students - 10,000 faculty and staff - 1 Assistant Director of IT Security - 3 security analysts (2 senior, 1 junior) - 2, part-time students ============= Kathy Bergsma UF Information Security Manager 352-392-2061 On Mon, 31 Jan 2005, Kathy Bergsma wrote:
In order to help justify expansion of the UF IT security team, I would like to know the number of staff dedicated to IT security at comparable institutions. Please respond with the name of your university, the number of students, and the number of dedicated IT security staff. UF has over 45,000 students, 3 full-time IT security staff, 1 part-time security staff, and 1 part-time PR person. Thanks in advance. I'll publish a summary back to the lists if there's interest. ============= Kathy Bergsma UF Information Security Manager 352-392-2061
********** Participation and subscription information for this EDUCAUSE Discussion Group discussion list can be found at http://www.educause.edu/groups/.
Current thread:
- Re: number of IT security staff, (continued)
- Re: number of IT security staff James H Moore (Jan 31)
- Re: number of IT security staff Theresa M Rowe (Jan 31)
- Re: number of IT security staff David Taylor (Jan 31)
- Re: number of IT security staff Gerry Sneeringer (Jan 31)
- Re: number of IT security staff Gary Dobbins (Feb 01)
- Re: number of IT security staff Rodney Petersen (Feb 01)
- Re: number of IT security staff Slade Griffin (Feb 01)
- Re: number of IT security staff Drews, Jane E (Feb 01)
- Re: number of IT security staff Alec Yasinsac (Feb 09)
- Re: number of IT security staff Valdis Kletnieks (Feb 09)
- Re: number of IT security staff Kathy Bergsma (Feb 11)