Educause Security Discussion mailing list archives

Re: success stories


From: Ardoth Hassler <hasslera () GEORGETOWN EDU>
Date: Wed, 19 Nov 2008 14:31:07 -0500

Kathy: while I don't recommend it, a breach certainly helped get upper
managements attention! After the clean up and notification, we were able
to garner some addition resources.

For senior management, I would say, "It's all about risk" and risk
mitigation.

Ardoth Hassler
Georgetown U.

Kathy Bergsma wrote:
I'm interested in hearing about your success stories engaging senior
management support for security initiatives.  What methods worked at
your institution?  I've suggested some methods below.  Let me know
which ones have worked for you and identify others ideas not listed.

Fear, uncertainty and doubt
Metaphors and analogies
Comparison with peer institutions
Financial benefits such as ROI (return on investment)
Leverage an incident
Metrics
Working behind the scenes
Ask forgiveness rather than permission
Little by little baby steps
Relationship building with key players?  Who are the key players
Other ideas


Current thread: