Re: Campus Security Governance Structures?

[Sarah Stevens <sarah () STEVENS-TECHNOLOGIES COM>]

Campus-wide information security governance initiatives are a very
interesting topic.  The widely distributed nature of universities has
resulted in a widely distributed information governance structure.  I am
working on a paper right now outlining just how much that is indeed
costing universities.  The cost of the financial services department
complying with GLBA, student records complying with FERPA, and now
individually funded research initiatives complying with FISMA
requirements really has an impact on institutions.  Bringing that back
together under one umbrella of information governance is a move that
needs to occur, in my humble opinion.

Very interesting topic indeed.

Sarah Stevens, CISSP
President
Stevens Technologies, Inc. 

-----Original Message-----
From: The EDUCAUSE Security Constituent Group Listserv
[mailto:SECURITY () LISTSERV EDUCAUSE EDU] On Behalf Of Martin Manjak
Sent: Monday, April 07, 2008 2:16 PM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: [SECURITY] Campus Security Governance Structures?

I'm curious to know what kinds of governance structures and processes 
people might have in place at their various institutions when it comes 
to information security. How are institutional priorities determined, 
who decides, and how do those get promulgated to the campus?
M-

-- 
Martin Manjak
Information Security Officer
University at Albany
CISSP, GIAC GSEC-G, GCIH, GCWN