Resources for Meeting Internet Safety Requirements Cheryl Elliott James Madison University Bill Johnsen Virginia Beach City Public Schools Educational Technology Leadership Conference December 5, 2007

Educational Technology Plan for Virginia Connectivity ◦ Goal 2 – Ensure sufficient support for ongoing, reliable network operations. ◦ Goal 4 – Ensure that school divisions have in place network security, filtering, and disaster recovery plans. Educational Applications ◦ Goal 2 – Promote and develop Web-based applications, services, and resources (online testing)

Internet Safety Guidelines School Divisions Must Address Data and network security plan Procedures to address breaches of Internet security and protect students’ safety

Virginia Alliance for Secure Computing and Networking (VASCAN) Cooperative IT security efforts were already underway among four Higher Education institutions Governor Mark Warner charged higher education to help meet IT goals of the Commonwealth Higher Education CIO Council developed plan in response JMU and GMU cybersecurity research centers’ charge to assist State in meeting security goals

VASCAN Purpose Strengthen security programs across Virginia higher education by integrating and making available field-proven tools, best practices, and people from VA SCAN partner institutions Establish links to security research, instruction, and federal/state government initiatives to enhance security opportunities

Charter Members Security Practitioners at ◦ George Mason University ◦ James Madison University ◦ University of Virginia ◦ Virginia Tech Security Researchers at ◦ Institute for Infrastructure and Information Assurance (JMU) ◦ Center for Secure Information Systems (GMU) ◦ Critical Infrastructure Protection Project (GMU/JMU)

Membership Changes Expanded to include IT auditor participation and development of IT auditing resources (October 2005) Virginia Commonwealth University joined alliance (February 2006) Virginia Beach City Public Schools joined alliance (March 2007)

Policy& Process People Technology Systems must be built to technically adhere to policy People must understand their responsibilities regarding policy Policies must be developed, communicated, maintained and enforced Processes must be developed that show how policies will be implemented VA SCAN Focus

Present Offerings Full service website Consulting ◦ “Ask the Expert” service ◦ On–site engagements Annual conference and SANS workshops

Benefits Realized Saves security program development time and improves quality Reduces security training costs Helps avoid costs, e.g. security incidents Makes positive statement about quality of IT security within education sector Builds relationships

On to the VACAN Site

What happens on the Web, stays on the Web….

When I Go to UVA….

Resources for Meeting Internet Safety Requirements Cheryl Elliott, James Madison University Bill Johnsen, Virginia Beach City Public Schools Presentation can be found at