Other Resources for Cybersecurity

Phishing Simulation Programs

April 27, 2017 | EDUCAUSE

Phishing Simulation Programs

A phishing simulation program (also commonly referred to as “self-phishing” or phishing assessment program) is a customizable awareness program used by information security professionals in higher education and private industry. This highly effective training program—which is typically incorporated into an existing campus information security awareness program—allows organizations to simulate phishing e-mails, help identify which end […]

More
Information Security Program Assessment Tool

April 27, 2017 | EDUCAUSE

Information Security Program Assessment Tool

This self-assessment tool was created to evaluate the maturity of higher education information security programs using as a framework the International Organization for Standardization (ISO) 27002:2013 “Information Technology Security Techniques. Code of Practice for Information Security Management.” This tool was intended for use by an institution as a whole, although a unit within an institution […]

More
Electronic Records Management Toolkit

April 27, 2017 | EDUCAUSE

Electronic Records Management Toolkit

A practical set of resources that will assist members of the higher education community in addressing related issues of electronic records management (ERM), e-discovery, and data retention on their own campuses.

More
Developing Your Campus Information Security Website

April 27, 2017 | EDUCAUSE

Developing Your Campus Information Security Website

In an effort to help institutions create effective information security websites that are informative and helpful to their users, the Higher Education Information Security Council has compiled a list of common features and effective practices that can serve as an outline for a college or university developing or updating their campus information security website.

More
Data Protection Contractual Language

April 27, 2017 | EDUCAUSE

Data Protection Contractual Language

Sample proposal and contract language for common themes related to data protection as well as practical guidance as to when and how to consider the themes when drafting or reviewing a request for information (RFI), request for proposal (RFP) or contract.

More
Cybersecurity Awareness Resource Library

April 27, 2017 | EDUCAUSE

Cybersecurity Awareness Resource Library

The EDUCAUSE/Internet2 Higher Education Information Security Council is pleased to present this compilation of cybersecurity awareness resources for colleges and universities. We hope that you will find them useful in your efforts to raise awareness within your community. If you would like to contribute additional materials to this library, please contact us.

More
Confidential Data Handling Blueprint

April 27, 2017 | EDUCAUSE

Confidential Data Handling Blueprint

A toolkit that constructs resources pertaining to confidential data handling. Many of the EDUCAUSE/Internet2 Higher Education Information Security Council (formerly the Security Task Force) working groups are working on components of the toolkit, but this consolidation and organization of resources anchors the overarching themes related to information protection.

More