Re: Mandatory Security Training in Higher Education

[James Moore <jhmiso () RIT EDU>]

We try to develop things in house, license under Creative Commons, and
share with Educause, and we encourage others to do the same.  With the
Creative Commons Share-Alike Non-Commercial license, we have even had
some inquiries from the corporate, and public sectors.

 

For online web-based security awareness, we use Captivate for things
that benefit from hands-on (for examples see
http://security.rit.edu/dsd102.html#simulations)  They will be creative
commons licensed too before too long.

 

Jim

 

________________________________

From: Youngquist, Jason R. [mailto:jryoungquist () CCIS EDU] 
Sent: Thursday, October 19, 2006 1:57 PM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: Re: [SECURITY] Mandatory Security Training in Higher Education

 

Speaking of mandatory security awareness training, do institutions
develop materials in house or outsource training to a 3rd party?  If a
3rd party, do you have any suggestions on companies that offer cost
effective on-line web-based security awareness training for
faculty/staff/students?

 

Thanks.

Jason Youngquist

Network Security Analyst

Technology Services

Columbia College

1001 Rogers Street, Columbia, MO  65216

(573) 875-7334

jryoungquist () ccis edu

http://www.ccis.edu

 

 

 

 

________________________________

From: Sadler, Connie [mailto:Connie_Sadler () BROWN EDU] 
Sent: Wednesday, October 18, 2006 4:57 PM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: [SECURITY] Mandatory Security Training in Higher Education

 

 

Having come from a background in the Corporate world, where security
training is *mandatory*, I'm wondering how many institutions of higher
ed require security training for staff and/or faculty. We are planning
to require it for our ERP system users (and all staff soon), but the
question always comes up - "What are others doing"? So I'd appreciate
information about how you folks have approached your senior
administration in terms of why mandatory training is so important. If
you are not yet requiring training, I'd be interested in the barriers
you still face. It seems particularly challenging for faculty.

Thanks much! 

Connie 

Connie J. Sadler, CM, CISSP, CISM, GIAC GSLC 
IT Security Officer
Brown University Box 1885, Providence, RI 02912
Connie_Sadler () Brown edu <mailto:Connie_Sadler () Brown edu> 
Office: 401-863-7266
PGP Key: http://pgp.mit.edu:11371/pks/lookup?op=get&search=0x91E38EFB
<http://pgp.mit.edu:11371/pks/lookup?op=get&search=0x91E38EFB> 
PGP Fingerprint: DA5F ED84 06D7 1635 4BC7 560D 9A07 80BA 91E3 8EFB