Re: Quick show of hands

[Rodney Petersen <rpetersen () EDUCAUSE EDU>]

These questions will be answered in the ECAR Research Study from the
survey conducted last November.  The results will be released in October
and there will be a discussion of the results at the open meeting of the
Security Task Force at the annual EDUCAUSE conference.  The final report
will also break it down by institutional type so you can compare against
your peers.

In short, the survey found:

34.9% of the respondents indicate that their institution had a formally
designated individual as its IT security officer (or equivalent), with
55.5% having been appointed since 2003.  

The position of IT security officer is full-time at 32.2% of the
institutions, which is up from 20% in 2003.  However, 70.6% of the
full-time IT security officers work at doctoral institutions. 

The responsibility for IT security primarily resides with the IT
security officer or equivalent (34.9%), which reflects a 55.8% rate of
change since 2003.  The greatest rate of change (113%) was for CIO's or
equivalent (14.3%).  The director of networking (21.8%) and other IT
management (23.9%) still share the largest share of responsibility,
although responsibilities appear to be shifting quickly away from them
(-28.9 percent rate of change and -22.7 percent rate of change,
respectively).

Overall, security staffing is on the increase with 4.7 percent having
ten or more employees, 8.1 percent having three employees, 13.2 percent
having two employees, and 21.6 percent having one FTE.  Nonetheless,
38.5 percent still have less than one full-time employee managing
security.  Less than one percent indicated an expected staff decrease,
while 50.2 percent expected no change and 24.4 percent expected to add
one staff member, and 7.7 percent two or more.

Regards,

-Rodney

-------------------------------------------------- 
Rodney J. Petersen
Policy Analyst & Security Task Force Coordinator

EDUCAUSE 
1150 18th Street, N.W., Suite 1010
Washington, D.C.  20036
(202) 331-5368 / (202) 872-4200 
(202) 872-4318 (FAX) 
EDUCAUSE/Internet2 Security Task Force
www.educause.edu/security 
-------------------------------------------------- 

-----Original Message-----
From: Jason Richardson [mailto:JasonR () GWM SC EDU] 
Sent: Thursday, August 10, 2006 8:59 AM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: [SECURITY] Quick show of hands

If you all don't mind, how many of you have a dedicated, full-time IT
Security office, where does it report, and how is it staffed? This would
not include those of you (and your staff) who wear security as one of
two or more hats in the org.

Thanks,

Jason Richardson
Network and Security Ops Manager
University Technology Services
University of South Carolina
803-777-0392
jasrich () sc edu