Re: number of IT security staff

[Kathy Bergsma <kathya () NERSP NERDC UFL EDU>]

Thanks to everyone that responded and thanks to Julia V. Emko for compiling this
summary of the responses.


Rutgers University
-       60,000 students
-       30,000 nodes on the network
-       6 full time, 2 part-time
-       Functions:
Security Policy
DMCA & copyright enforcement
Incident response and reporting
Security awareness
Information Assurance & compliance (GLBA, HIPPA, etc)
Centralized authentication

Wright State University
-       12,000 students
-       2,000 full time faculty and staff
-       1 full-time security person

North Dakota State University
-       12,000 students
-       3,000 staff and faculty
-       1 security person

James Madison University
-       15,000 students
-       3 full-time security staff

University of British Columbia
-       40,000 students
-       4 fulltime security staff

Cal Stare Northridge
-       38,000 students
-       1 full time security person

SWARTHMORE
-       1500 students
-       0 security staff

State University of NY, POTSDAM
-       4200 students
-       0 security staff

Northern Illinois University
-       20,000 students
-       3600 faculty and staff
-       1 full time security staff
-       1 part time clerk to do paperwork

State University of NY  College at Geneseo
-       5500 students
-       1 person who spend  time on security

University of Texas at Austin:
- 70K affiliates (student/staff/faculty)
- 2.5 Operational ISO Staffers
- 3.0 Strategic ISO Staffers
- 1.0 CISO

Cornell University
- 20,000 students,
- 6 full-time security
- use matrix organizations to do outreach, awareness, etc.

DePaul University
-       23,000 students
-       3,000 staff
-       2.5 full time security people

University of West Florida
-       10,000 students
-       2200 faculty staff
-       0 dedicated to security

University of Georgia
- 33,000 students
12,000 faculty and staff
1-BCP & Risk Mgmt.
1-Incident Response Coordination
1-Security Awareness, training and Education
1-Security Ops Center
1-Policy Mgmt
1-Desktop and User Security
2-Student workers

Kansas State University
-       23,000 students
-       5,000+ full time faculty and staff
-       1 full time security staff
-       20-member incident response team (including reps)

University of Minnesota
-       65,000 students
-       11 security team
-       Note that before I started working for our security team in March, 2003,
there were six people on the team. Three people were hired in the last six
months alone. Also note that several people in our team are in what some people
would call less technical roles, such as scheduling vulnerability scans,
handling abuse@ email, and PR stuff - roles that other institutions might have
in different areas. However, the number (11) does not include financial or HR
roles. (The folks in the less technical roles are not exactly non-technical
folks though.)


University of Wisconsin-Whitewater
-       10,500 students
-       1 security staff

Alfred University
-       2500 students
-       1 fulltime security person

California State University Stanislaus
-       8000 students
-       1 full time security staff

Boston College
-       12-16,000 students
-       4000 faculty and staff
-       2 full time security people

Washington
-       6 full time security employees
-        3 students
-       38,000 students (main campus)

Swiss Federal Institute of Technology Zurich
-       25,000 students
-       8,000 staff members
-       4 full-time people

University of Pennsylvania
-       25,00 students
-       35,000 computers
-       4 security employees
-       1 temporary HIPPA consultant

University of Chicago
-       14,000 students
-       14,500 faculty and staff
-       4 full time security people

University of California Riverside
-       17,000 students
-       2 full-time security
-       1 part time policy person
-       1 student helper

University of Maryland
-       35,000 students
-       1 director
-       3 to-come (1 currently) technical assistants
-       1 part-time
-       2 grad students

University of Auckland
-       30,000 students
-       2 full time
-       1 part-time

Indiana University (all campuses)
-       126,000 students, faculty and staff
-       10 fulltime security people

Portland State University
-       25,000 students
-       1 full time security officer
-       1 part time student analyst

Texas A&M University
-       43,000 students
-       3 full time
-       1 open position

University of Notre Dame
-       10,000 students
-       about 3,000 faculty and staff
-       1 director
-       3 (to come), 1 (currently) technical staff

University of Tennessee (all campuses)
-       27,300 students
-       1 security officer
-       1 director
-       6 fulltime security analysts
-       2 student workers

Grace College
-       1100 students
-       1 full time security (only 30% toward security staff)

Monash University
-       50,000 students
-       5000 students
-       4 IT security staff
-       1 disaster recover/business continuity expert

University of Wisconsin . Madison
-       40,000 students
-       15,000 faculty and staff
-       6 in security department
-       8 more volunteers for BadgIRT
-       5 HIPAA components have 1 person on security

University of North Florida
-       14,500 students
-       1 full time security person

Florida State University
-       3 dedicated security staff positions
-       37,000 students

University of Iowa
-       30,000 students
-       1 IT Security Officer
-       1 Senior Security Analysts
-       1 Security Analysts
-       .5 Student security analyst

Southern Illinois Unviersity
-       34,000 students
-       2 full time security
-       1 student worker
-       1 GA

Penn State
-       81,000 students
-       21,000 students
-       1 security director
-       1 forensics/litigation
-       6 incident response
-       training, marketing, and PR
-       also, a complete marketing team for the ITS department

University of California . Berkely
-       33,000 students
-       1 security officer
-       6 security staff

University of Virginia
-       23,341 students
-

University of Arizona
-       36,661 students
-       1 director/manager
-       3 security incident response
-       2 software developers

Purdue University
-       40,000 students
-       1 Identity Access Management
-       1 Security Services
-       1 Education and Communication
-       1 Special Projects and Policy
-       1 Research and Collaboration

University of Delaware
-       21,000 students
-       3,685 employees
-       7 security team members

New York University
-       37,000 students
-       10,000 faculty and staff
-       1 Assistant Director of IT Security
-       3 security analysts (2 senior, 1 junior)
-       2, part-time students


=============
Kathy Bergsma
UF Information Security Manager
352-392-2061

On Mon, 31 Jan 2005, Kathy Bergsma wrote:

> In order to help justify expansion of the UF IT security team, I would like
> to know the number of staff dedicated to IT security at comparable
> institutions. Please respond with the name of your university, the number of
> students, and the number of dedicated IT security staff.
>
> UF has over 45,000 students, 3 full-time IT security staff, 1 part-time
> security staff, and 1 part-time PR person.
>
> Thanks in advance.  I'll publish a summary back to the lists if there's
> interest.
>
> =============
> Kathy Bergsma
> UF Information Security Manager
> 352-392-2061

**********
Participation and subscription information for this EDUCAUSE Discussion Group discussion list can be found at 
http://www.educause.edu/groups/.