Educause Security Discussion mailing list archives

Re: What Every President Needs To Know


From: Dick Jacobson <Dick.Jacobson () NDSU NODAK EDU>
Date: Wed, 12 Feb 2003 12:41:09 -0600

On Wed, 12 Feb 2003, Dorette Kerian wrote:

The State of North Dakota has been updating their security policies since
Spring 2002 and Higher Ed has a voice and a vote on the Security
Domain Team.  While we maintain our autonomy we realize that we often work
together and support each other in some areas and can not afford to have
our policies contradict each other.

We are also part of a public university system which, by law, must get
our wide area networking through state government IT.  We have a long
relationship with our state government IT office so that they listen to
us when we make the case for the our special mission including teaching
and research.  And, the State Board of Higher Education is appointed by
the governor but does not report there, so we try to make the case that
we're not 'part of state government' whenever needed.  Even with that,
with the many international and national threats, it is even more
important to be sure we implement appropriate security or it could be
'done to us'.
I agree senior management needs to be made aware.
Best wishes,
Dorette
Dorette Kerian
Director, Information Technology System Services
University of North Dakota
North Dakota University System
dorette.kerian () mail und nodak edu


Tom Neiss <TNeiss () UAMAIL ALBANY EDU> 02/11/03 12:57PM >>>
Rodney
Thank you for asking.  Although I have many issues that presidents need
to
know I would like to know if what is happening in my state is
happening
elsewhere.  As a public institution we are part of state government.
Our
state government IT office may adopt a very stringent security policy
which
is currently in draft form. I am wondering if other public institutions
are
seeing this happening in their states?  Basically, having to subscribe
to a
very stringent policy that doesn't take into consideration academic
freedom,
teaching, research and service?  And, if so, how are they addressing
that
issue.  For my university it would take considerable funding to support
such
a policy.
This policy is well overdue and is very well written, however, if
higher
education has to subscribe to this policy it will be very costly and
may
require policy that affects our missions.  Senior management needs to
be
aware of that.
Thomas R. Neiss
Interim Director of Telecommunications and Information Security
State University of New York
University at Albany
1400 Washington Avenue
MSC 209
Albany, NY 12222
(518) 437-3800
(518) 437-3810 (F)
tneiss () uamail albany edu


-----Original Message-----
From: Rodney Petersen [mailto:rpetersen () EDUCAUSE EDU]
Sent: Monday, February 10, 2003 6:33 PM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: [SECURITY] What Every President Needs To Know


The recent thread concerning "CEO/Cabinet language on security issues"
is a timely topic for the EDUCAUSE/Internet2 Computer and Network
Security Task Force.  Marty Hoag in his message alluded to a scheduled
presentation from the Security Task Force to the Board of the American
Council on Education (ACE).  A presentation to the ACE Board,
comprised
of college and university presidents (see
http://www.acenet.edu/about/ace_board.cfm), is scheduled for this
Saturday, Februar 15th, immediately prior to the ACE Annual Meeting.

As the Security Task Force prepares its remarks and refines its
messages
for college and university presidents, we would welcome your advice,
in
general, and especially your response to the following phrase:

What Every President Needs To Know About Computer and Network Security

Please share your ideas, case studies, anecdotes, experiences, and
other
words of wisdom that the Security Task Force should consider as we
make
the case before college and university presidents of the need for and
importance of improved computer and network security for higher
education.

Please share your responses with the entire Discussion Group.  Any
input
received this week will be useful as we finalize our presentation.

Thanks in advance for your assistance,

Rodney Petersen
Security Task Force Coordinator
EDUCAUSE

**********
Participation and subscription information for this EDUCAUSE
Discussion
Group discussion list can be found at
http://www.educause.edu/memdir/cg/.

**********
Participation and subscription information for this EDUCAUSE Discussion
Group discussion list can be found at
http://www.educause.edu/memdir/cg/.

**********
Participation and subscription information for this EDUCAUSE Discussion Group discussion list can be found at 
http://www.educause.edu/memdir/cg/.


--

-----------------------------------------------------------------------
Dick Jacobson                   e-mail : Dick.Jacobson () ndsu NoDak edu
ND HECN MultiUser Host SysAd    office : IACC 206, NDSU
NDUS IT Security Officer        phone  : 701-231-7385
-----------------------------------------------------------------------

**********
Participation and subscription information for this EDUCAUSE Discussion Group discussion list can be found at 
http://www.educause.edu/memdir/cg/.

Current thread: