Re: Mtgs with people outside of IT?

["Ullman, Catherine" <cende () BUFFALO EDU>]

HI Jessica!



You could discuss current issues in IT security, such as social networking
sites, phishing scams, mobile devices, or whatever else you see as being
current (read: not old had for your listeners) and relevant to your
environment.  I find it helpful to talk about current issues, which means
that I'm always providing new information to the customer base.  While we in
IT know at heart that it's really mostly the same stuff under the hood, the
non-IT folks don't always understand that.  Providing specific illustrations
for how these issues apply to current technologies can be very beneficial
and, if you're lucky, propagate to other people on campus.  For example, my
brief discussion of current Facebook issues not only brought awareness to
light for the folks I recently taught, but to their friends and family, many
of whom work on campus as well.



Best,

Cathy



Catherine J. Ullman

Information Security Analyst

Information Security Office

University at Buffalo



  _____

From: The EDUCAUSE Security Constituent Group Listserv
[mailto:SECURITY () LISTSERV EDUCAUSE EDU] On Behalf Of Raymond, Jessica
Sent: Wednesday, May 12, 2010 11:15 AM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: [SECURITY] Mtgs with people outside of IT?



Hi all!  I am the chair of a monthly meeting where we meet with other
administrative staff from finance, the Registrar's office, accounting,
payroll, hr, the internal auditor, etc.  It's supposed to be a committee in
which to discuss IT security topics with people outside of IT.  I've been
doing this for a year now and find myself at a loss for what to discuss in
the meeting and how to make it beneficial and worthwhile for those in
attendance.  Do you hold these types of meetings, and if so, what agenda
items are discussed?



We've discussed:

Data Retention

Handling of Sensitive Information

The creation of online courses for students, faculty, and staff

Physical Security

How to best communicate with students



Any insight will be appreciated!



Jessica L. Behunin, CISSP R (formerly Raymond)

Information Security Analyst

Information Technology Department

University of Northern Colorado

Campus Box 19

Carter Hall 14, Office 0009b

Greeley, CO 80639

Office: 970-351-1420

Mobile: 970-213-8928

www.unco.edu

e-mail_sig_med

Attachment: smime.p7s
Description: