Re: Information Security Governance Framework

["Howell, Paul" <grue () UMICH EDU>]

We've been looking at it as well, wondering if we can alter it measure
progress at the school/college/department level.

Beyond that, I filled it out for U-M and we need improvement.  :)

Regards.

Paul Howell, CISSP
Chief Information Technology Security Officer
The University of Michigan
Contact information is at: http://tinyurl.com/477bc
  
  

> -----Original Message-----
> From: Doug Markiewicz [mailto:dmarkiew+educause () ANDREW CMU EDU] 
> Sent: Wednesday, January 09, 2008 10:52 AM
> To: SECURITY () LISTSERV EDUCAUSE EDU
> Subject: [SECURITY] Information Security Governance Framework
>
> I am curious whether anyone actively uses the higher ed. 
> version of the Information Security Governance Assessment 
> Tool that was published by the Corporate Governance Task 
> Force and if so, what your experience has been with it.  
>
> Regards,
>
> Doug Markiewicz
> Information Security Office
> Carnegie Mellon University
> Phone: 412-268-1329
> Mobile: 412-310-7112