Educause Security Discussion mailing list archives

Re: success stories


From: Wayne Samardzich <Samardzi () CALUMET PURDUE EDU>
Date: Wed, 19 Nov 2008 13:23:52 -0600

We found that having Internal Auditing do an audit and issuing a report
an excellent way to get what we need for security. Complying with IA is
always a powerful motivator.

Wayne

Wayne Samardzich
Operations Supervisor
Purdue University Calumet
219 989 2307

-----Original Message-----
From: The EDUCAUSE Security Constituent Group Listserv
[mailto:SECURITY () LISTSERV EDUCAUSE EDU] On Behalf Of Kathy Bergsma
Sent: Wednesday, November 19, 2008 1:22 PM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: [SECURITY] success stories

I'm interested in hearing about your success stories engaging senior
management support for security initiatives.  What methods worked at
your 
institution?  I've suggested some methods below.  Let me know which ones
have 
worked for you and identify others ideas not listed.

Fear, uncertainty and doubt
Metaphors and analogies
Comparison with peer institutions
Financial benefits such as ROI (return on investment)
Leverage an incident
Metrics
Working behind the scenes
Ask forgiveness rather than permission
Little by little baby steps
Relationship building with key players?  Who are the key players
Other ideas

-- 
Kathy Bergsma
UF Information Security Manager
352-392-2061

Current thread: