HEISC June 2017 Update: New Resources & List Reminders

[Valerie Vogel <vvogel () EDUCAUSE EDU>]

Good morning!

We hope you’ll find some time to check out the latest security and privacy resources for the higher ed community.

NOTE: This message also offers some friendly reminders about Security Discussion list participation.

Resources

  *   Download the latest versions of the Higher Education Cloud Vendor Assessment Tool 
(HECVAT)<https://library.educause.edu/resources/2016/10/higher-education-cloud-vendor-assessment-tool>.
  *   Read the 2017 Security Awareness 
Report<https://securingthehuman.sans.org/resources/security-awareness-report-2017> published by SANS, which includes 
detailed recommendations and action plans to help you improve your infosec awareness program.
  *   Listen to a recording of the latest HEISC webinar, “From Art to Science: How Risk Can Transform Your Information 
Security 
Program<https://library.educause.edu/resources/2017/5/heisc-webinar-from-art-to-science-how-risk-can-transform-your-information-security-program>”
 (slides and chat transcript are also available).
  *   There’s No “I” in Team (Come to Think of It, There’s No “I” in SPC 
Either)<http://er.educause.edu/blogs/2017/6/theres-no-i-in-team-come-to-think-of-it-theres-no-i-in-spc-either> by David 
Sherry, Tara Schaufler, Dean Plante, Steven, Niedzwiecki, and Daphne Ireland, Princeton University
  *   Highlights from the 2017 Security Professionals Conference: 15th Anniversary 
Edition<http://er.educause.edu/blogs/2017/6/stay-ahead-of-security-threats-with-a-7-step-incident-response-plan> by 
Lanita Collette, University of Arizona and Brian Kelly, Quinnipiac University
  *   Stop Phishing with Bad Fake Bait<http://er.educause.edu/blogs/2017/6/stop-phishing-with-bad-fake-bait> by Daniel 
Calarco, Jennifer Westerhaus Adams, and Mario Arango, Indiana University
  *   Children Are the Future of 
Cybersecurity<http://er.educause.edu/blogs/2017/6/children-are-the-future-of-cybersecurity> by Michaela Webster, 
undergraduate student, University of Pittsburgh
  *   Peer Power: Better than Personal Gain and Fear Tactics for Security 
Compliance<http://er.educause.edu/blogs/2017/6/peer-power-better-than-personal-gain-and-fear-tactics-for-security-compliance>
 by Caitlin Campbell, undergraduate student, University of Pittsburgh
  *   Stay Ahead of Security Threats with a 7-Step Incident Response 
Plan<http://er.educause.edu/blogs/2017/6/stay-ahead-of-security-threats-with-a-7-step-incident-response-plan> by Todd 
O’Boyle, Strongarm
  *   Cybersecurity in Higher Ed: Thoughts, Fears, and 
Empowerment<http://er.educause.edu/blogs/2017/6/cybersecurity-in-higher-ed-thoughts-fears-and-empowerment> by Alyse 
Zavala, Duke University

Events

  *   Register for the August 9 extended online event, Metrics Mania! Using Metrics to Bolster Your Higher Ed InfoSec 
Program<https://events.educause.edu/webinar/2017/metrics-mania-using-metrics-to-bolster-your-higher-education-information-security-program>
  *   2017 Security Professionals Conference presentations and handouts are still being uploaded as we receive them. 
(To find resources, visit the agenda<https://events.educause.edu/security-professionals-conference/2017/agenda>, select 
the session you’re interested in, and look for the Resources & Downloads section below the abstract and speakers.)

Security Discussion Group<https://www.educause.edu/discuss/security-discussion-group> Participation Reminders

  *   This list is public; anyone is welcome to subscribe.
  *   Archives are publicly available and searchable.
  *   Posts to this list may be aggregated by other sites such as http://seclists.org/
  *   Replies will automatically go to the entire list. If you intend to respond directly to an individual on the list, 
please be sure to check the “To:" line before sending your message.
  *   For more sensitive questions or sharing of information, consider using the REN-ISAC<https://www.ren-isac.net/> 
list if you are a member.

Stay Informed

  *   Twitter<https://twitter.com/HEISCouncil>
  *   Pinterest<https://www.pinterest.com/heiscouncil/>
  *   YouTube<http://www.youtube.com/user/SecurityVideoContest>
  *   Security Matters blog column<http://er.educause.edu/columns/security-matters> in EDUCAUSE Review

Please send an e-mail to security-council () educause edu<mailto:security-council () educause edu> if you’d like to see 
HEISC address new topics or create additional resources for this community!

Thank you,
Valerie

Valerie Vogel Senior Manager, Cybersecurity Program

EDUCAUSE
Uncommon Thinking for the Common Good
direct: 202.331.5374 | main: 202.872.4200 | twitter: @HEISCouncil | educause.edu<http://www.educause.edu/>