Re: Mandatory Security Training in Higher Education

[Jeff McCabe <j-mccabe () NEO TAMU EDU>]

Connie,



The state (Texas) has given us a considerable degree of help in this area in
that they would like all employees of the state that use IT resources to
have such training.   The first version of our training modules may be
viewed at http://infosat.tamu.edu/.  Later this month, new staff and faculty
versions will be released.  The student version (which was created solely by
students) will have a new version later in the year.  Faculty focus groups
were used for guidance in developing the faculty version.  Our intent is to
revise/update the training each year as it is annual requirement.



Kind regards,

Jeff





  _____

From: Sadler, Connie [mailto:Connie_Sadler () BROWN EDU]
Sent: Wednesday, October 18, 2006 4:57 PM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: [SECURITY] Mandatory Security Training in Higher Education





Having come from a background in the Corporate world, where security
training is *mandatory*, I'm wondering how many institutions of higher ed
require security training for staff and/or faculty. We are planning to
require it for our ERP system users (and all staff soon), but the question
always comes up - "What are others doing"? So I'd appreciate information
about how you folks have approached your senior administration in terms of
why mandatory training is so important. If you are not yet requiring
training, I'd be interested in the barriers you still face. It seems
particularly challenging for faculty.

Thanks much!

Connie

Connie J. Sadler, CM, CISSP, CISM, GIAC GSLC
IT Security Officer
Brown University Box 1885, Providence, RI 02912
 <mailto:Connie_Sadler () Brown edu> Connie_Sadler () Brown edu
Office: 401-863-7266
PGP Key:  <http://pgp.mit.edu:11371/pks/lookup?op=get&search=0x91E38EFB>
http://pgp.mit.edu:11371/pks/lookup?op=get&search=0x91E38EFB
PGP Fingerprint: DA5F ED84 06D7 1635 4BC7 560D 9A07 80BA 91E3 8EFB