1. Higher Education Information Security Council
David Swartz
Chief Information Officer
American University

2. HEISC Background Hosts: EDUCAUSE and Internet2
History: Serving higher education since 2000
Mission: to improve information security and privacy across the higher education sector by actively developing and promoting effective practices and solutions for the protection of critical IT assets and infrastructures.

3. Activities Security Discussion Group Working Groups
People: awareness and training
Process: compliance, policies, risk, governance
Technology: effective practices and solutions
Professional Development
Annual Security Professionals Conference
SANS-EDU Partner Series
Collaborations and Partnerships
Research and Education Networking Information Sharing and Analysis Center (REN-ISAC)
Center for Internet Security
. . . and more

4. HEISC Strategic Plan
Theme: Safeguarding Our IT Assets, Protecting Our Community’s Privacy
Goals:
Obtain Executive Commitment and Action
Manage Data to Enhance Privacy and Security Protections
Develop and Promote Effective Practices and Solutions
Explore New Tools and Technologies
Establish and Promote Information-Sharing Mechanisms

5. Special Projects Confidential Data Handling Blueprint
Guidelines for Data and Media Sanitization
Toolkit for Electronic Records Management, Data Retention, and e-Discovery
Information Security Governance
Risk Management Framework
Security Awareness Poster/Video Contest
National Cybersecurity Awareness Month
Security Metrics

6. Effective Security Practices Guide
Risk Management
Compliance
Security Policy
Organization of Information Security
Asset Management
Human Resources Security
Physical and Environmental Security
Communications and Operations Management
Access Controls
Information Systems Acquisition, Development, and Maintenance
Incident Management
Business Continuity Management

7. Call to Action Attend Contribute Join Volunteer
Security Professionals Conference April 12-14, 2010, Atlanta, Georgia net.educause.edu/conference/security
Contribute
Submit an Effective Practice and Solution
Join
Discussion Group:
REN-ISAC:
Volunteer
Send an to

8. For More Information Visit: Contact:
Higher Education Information Security Council
Contact:
David Swartz, American University, HEISC Co-Chair
Brian Voss, LSU, HEISC Co-Chair
Peter Siegel, UC-Davis, HEISC Co-Chair
Rodney Petersen, EDUCAUSE, HEISC Staff