1. Welcome and Introduction to the Security Task Force Peter Siegel Co-Chair, Security Task Force Chief Information Officer and Vice Provost University of California, Davis

2. Mission The Security Task Force works to improve information security and privacy across the higher education sector by actively developing and promoting effective practices and solutions for the protection of critical IT assets and infrastructures, both through the work of its community members and through focused partnerships with other government, industry, and academic organizations.

3. 2008-09 Strategic Plan Theme: Safeguarding Our IT Assets – Protecting Our Community’s Privacy Goals  Strategies Action Items Resources to Build On  Confidential Data Handling Blueprint  Data Incident Notification Toolkit

4. Working Groups Awareness & Training Effective Practices and Solutions Policies and Legal Issues Risk Assessment SALSa/Internet2 Security Initiatives Security Conference Program Committee

5. Awareness and Training 3 rd Annual Student Video and Poster Contest Planning for National Cyber Security Awareness Month in October Online Security Training Modules SANS-EDU Partnership

6. Effective Practices & Solutions Effective IT Security Practices Guide Applications Security Effective Practices Subgroups:  Encryption  PCI DSS  Security Metrics

7. Policies & Legal Issues Legal Issues  Proposed FERPA Rules  Contracts – e.g., outsourcing Subgroups:  Business Continuity Planning  Contracts with 3 rd Parties Who Handle Data  Data Classification Toolkit  Model Security Policies

8. Risk Assessment Risk Assessment Framework Risk Assessment Consultants List Risk Assessment Tools Information Security Governance Self- Assessment Tool

9. Internet2 Security Initiatives SALSa – security advisory group Working Groups  Computer Security Incidents (CSI2)  Disaster Planning and Recovery  NetAuth – network access and abuse issues Middleware Initiative

10. Getting Involved Subscribe to the Security Discussion Group  http://www.educause.edu/Security+Discussion+Group Join the REN-ISAC  http://www.ren-isac.net Submit a Proposal or Attend Security 2009  http://www.educause.edu/conference/security Volunteer for a Working Group  Awareness and Training  Effective IT Practices and Solutions  Policies and Legal Issues  Risk Assessment  SALSa/Internet2  Security Conference Program Committee

11. For More Information Visit:  EDUCAUSE/Internet2 Security Task Force http://www.educause.edu/security Contact:  Mely Tynan, Tuft University, STF Co-Chair amelia.tynan@tufts.edu  Peter Siegel, UC-Davis, STF Co-Chair pmsiegel@ucdavis.edu  Rodney Petersen, EDUCAUSE, STF Staff rpetersen@educause.edu