Re: Information Security Advisory Committee

[Ben Woelk <fbwis () RIT EDU>]

Chris,
We use a core team to develop standard/policies to ensure that they are reasonable for the university. The core team 
membership varies depending on the nature of the standard and may include specific faculty and staff.

We vet the standard through an extended team composed of key business and technical people representing various 
stakeholders. We have representation from the provost office and our academic senate as well as business areas 
(including audit).

The resulting standards are then reviewed by legal and signed off on by the VP of Finance and Administration.

Process documents are at http://security.rit.edu/standards/index.html

Ben Woelk '07
Information Security Communications and Training Specialist
Rochester Institute of Technology
Ross 10-A204
151 Lomb Memorial Drive
Rochester, New York 14623
585.475.4122
585.475.7920 fax
ben.woelk () rit edu
http://security.rit.edu/dsd.html

Become a fan of RIT Information Security at http://rit.facebook.com/profile.php?id=6017464645

Follow us on Twitter: http://twitter.com/RIT_InfoSec

-----Original Message-----
From: The EDUCAUSE Security Constituent Group Listserv [mailto:SECURITY () LISTSERV EDUCAUSE EDU] On Behalf Of Chris 
Kidd
Sent: Friday, April 16, 2010 3:28 PM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: [SECURITY] Information Security Advisory Committee

We're looking at creating a formal information security advisory committee to help review policies, guidance, etc. and 
make recommendations on implementation and maintenance of the University's security program.

If you have such an advisory board and are willing to share the charter, membership (titles), or other related 
documents, please let me know.

Thank you,
Chris

Chris Kidd
Chief Information Security and Privacy Officer
University of Utah
650 Komas Drive, Suite 102
Salt Lake City, UT 84108
Office: 801.587.9241
Cell: 801.747.9028
chris.kidd () utah edu

http://www.secureit.utah.edu