Re: Job Descriptions

[Matt Marmet <matt.marmet () ARMSTRONG EDU>]

I am also looking for the roles of the security department and what they
have permission to touch and or approve. For instance, what do they
control? Do they touch or just approve firewall changes? For those with
Active Directory, do you have the Security dept. approving group policy
creations/changes? What about network infrastructure decisions and
architecture? To what extent is the security department involved with
server and desktop creations?



Thanks for sharing.



Matt



---
Matt Marmet
Director of IT Security, CISO
Armstrong Atlantic State University
11935 Abercorn Street
Savannah, GA 31419
Desk: (912) 344-3528
Cell:  (912) 414-0684



Security Tip: No matter how authentic the request appears, if you are asked
in an email or via the phone to provide your password - it is a SCAM.


******* The ITS Team will NEVER, EVER, EVER ----- EVER ask for your

username and password via Email. Don't respond to any requests for
this information ******



"The lesson here is that anything that holds any data of any value must be
protected."



*From:* Matt Marmet [mailto:matt.marmet () armstrong edu]
*Sent:* Monday, December 05, 2011 10:41 AM
*To:* 'SECURITY () LISTSERV EDUCAUSE EDU'
*Subject:* Job Descriptions



Good Morning All,



Does anyone have a CISO or Director of IT Security job description that
they would be willing to share? I am specifically looking for rolls and
responsibilities along with any policies that pertain to the positions.
Feel free to send it to me on or offline.



Thanks,



Matt



---
Matt Marmet
Director of IT Security, CISO
Armstrong Atlantic State University
11935 Abercorn Street
Savannah, GA 31419
Desk: (912) 344-3528
Cell:  (912) 414-0684



Security Tip: No matter how authentic the request appears, if you are asked
in an email or via the phone to provide your password - it is a SCAM.


******* The ITS Team will NEVER, EVER, EVER ----- EVER ask for your

username and password via Email. Don't respond to any requests for
this information ******



"The lesson here is that anything that holds any data of any value must be
protected."