Re: Question about INFORMATION SECURITY GOVERNANCE ASSESSMENT TOOL FOR HIGHER EDUCATION

[Adam Menos <amenos () ARTIC EDU>]

Here is one the FSA recommends.

 

https://ifap.ed.gov/eannouncements/Cyber.html

 

https://ifap.ed.gov/eannouncements/attachments/FFIEC_CAT_form.pdf

 

 

Adam Menos
Director of Information Security 

116 S Michigan Ave | Chicago, IL 60603
Office: 312.499.4031
 <mailto:amenos () artic edu> amenos () artic edu

 <http://www.artic.edu/> AIC     <http://www.saic.edu/> SAIC
 <http://www.artic.edu/> 


From: The EDUCAUSE Security Constituent Group Listserv [mailto:SECURITY () LISTSERV EDUCAUSE EDU] On Behalf Of Valerie 
Vogel
Sent: Friday, February 16, 2018 10:18 AM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: Re: [SECURITY] Question about INFORMATION SECURITY GOVERNANCE ASSESSMENT TOOL FOR HIGHER EDUCATION

 

Thanks Andy! I was about to respond with the same link. ☺ 

 

Raisha – You might also find these two tools useful – an IT Risk Register and an IT Governance Toolkit

*       https://library.educause.edu/resources/2015/10/it-risk-register 
*       https://library.educause.edu/resources/2017/12/it-governance-toolkit 

 

Thank you,

Valerie

 

Valerie Vogel 

Senior Manager, Cybersecurity Program

EDUCAUSE
Uncommon Thinking for the Common Good

direct: 202.331.5374 | twitter: @HEISCouncil |  <mailto:vvogel () educause edu> vvogel () educause edu 

From: Security Discussion Group List <SECURITY () LISTSERV EDUCAUSE EDU> on behalf of Andrew Weisskopf <aweissko () 
BINGHAMTON EDU>
Reply-To: Security Discussion Group List <SECURITY () LISTSERV EDUCAUSE EDU>
Date: Friday, February 16, 2018 at 8:13 AM
To: Security Discussion Group List <SECURITY () LISTSERV EDUCAUSE EDU>
Subject: Re: [SECURITY] Question about INFORMATION SECURITY GOVERNANCE ASSESSMENT TOOL FOR HIGHER EDUCATION

 

Raisha, Is this what you're looking for? 

 

https://library.educause.edu/resources/2015/11/information-security-program-assessment-tool

 

Also, if you haven't checked it out, the HEISC Information Security Guide 
(https://spaces.internet2.edu/display/2014infosecurityguide/Home) is full of useful information and tools.

 

--Andy




Andrew Weisskopf

Director of Security Operations and Chief Information Security Officer

Binghamton University

 <http://www.binghamton.edu/its/> http://www.binghamton.edu/its/

 

Binghamton, NY  13902

(607) 777-6198 (W)

 <mailto:aweissko () binghamton edu> aweissko () binghamton edu

 

On Fri, Feb 16, 2018 at 10:41 AM, Cobb, Raisha <cobbr () wssu edu> wrote:

Greetings,

 

Curious if anyone can point me to an updated or excel version of the above-referenced tool located here 
https://www.educause.edu/ir/library/pdf/SEC0421.pdf?  Or, does another campus have a tool that they are willing to 
share?

 

Thanks!

 

 

Regards,

 

Raisha Cobb – MSTM, CISSP, CBCP

Executive Director of Communication Technology  & Information Security Officer

Office of Information Technology

♈ Winston-Salem State University ♈

1209 Elva Jones Computer Science Building

Winston-Salem, NC 27110

 

Main: (336) 750-2092     Fax: (336) 750-2093

Email:  <mailto:cobbr () wssu edu> cobbr () wssu edu

 



 

I'm protecting the privacy of your information the way I hope you'd protect mine.  
<https://er.educause.edu/~/media/images/blogs/2017/9/erob17532thumbnail.jpg?la=en&hash=79AB15EC6839527077BAC2AF76840293BE1BC785>
 Learn more.  
#PrivacyAware #CyberAware

https://staysafeonline.org/wp-content/uploads/2017/09/dpd_english.jpg

 

NOTICE: Emails sent and received in the course of university business are subject to the North Carolina Public Records 
Act (N.C.G.S. §132-1 et seq.) and may be released to the public unless an exception applies.