Re: Recommendations On Cabinet Level InfoSec position

[Rodney Petersen <rpetersen () EDUCAUSE EDU>]

I have enjoyed reading the lively, although diverse, responses to the
original question.  Jim, I think what you were looking for was the
letter from ACE President David Ward to all college and university
presidents this past February
(http://www.acenet.edu/washington/letters/2003/03march/cyber.cfm).

The specific recommendation states:

Establish responsibility for campus-wide Cybersecurity at the cabinet
level. At a large university, this responsibility might be assigned to
the Chief Information Officer. At a small college, this person may have
responsibility for many areas, including the institutional computing
environment.

Additionally, the National Strategy to Secure Cyberspace
(www.securecyberspace.gov) states that "colleges and universities are
encouraged to secure their cyber systems by establishing . . . model
guidelines empowering Chief Information Officers (CIOs) to address
cybersecurity" (A/R 3-5).

Please let me know if you have any further questions.

Rodney Petersen
Project Director, Security Task Force
EDUCAUSE

-----------------------------------------------------------------------


At the Educause security professionals workshop, I believe that someone
mentioned that a college/university presidents group had a task force
which made the recommendation that a cabinet level position for
Information Security be created at colleges/universities.

Does anyone have a reference?

Does anyone have the text of the report/recommendation letter?

Jim
--
--
Jim Moore, CISSP, IAM
Information Security Officer
Rochester Institute of Technology
13 Lomb Memorial Drive
Rochester, NY 14623-5603
Telephone: (585)475-5406
Fax:       (585)475-7950

PGP (jimmoore () mail rit edu): 9C33 0328 CD59 B602 82B8 8521 0DC9 963C D0C0

**********
Participation and subscription information for this EDUCAUSE Discussion Group discussion list can be found at 
http://www.educause.edu/memdir/cg/.