1. Resources for Meeting Internet Safety Requirements Cheryl Elliott James Madison University Bill Johnsen Virginia Beach City Public Schools Educational Technology Leadership Conference December 5, 2007

2. Educational Technology Plan for Virginia Connectivity ◦ Goal 2 – Ensure sufficient support for ongoing, reliable network operations. ◦ Goal 4 – Ensure that school divisions have in place network security, filtering, and disaster recovery plans. Educational Applications ◦ Goal 2 – Promote and develop Web-based applications, services, and resources (online testing)

3. Internet Safety Guidelines School Divisions Must Address Data and network security plan Procedures to address breaches of Internet security and protect students’ safety

4. Virginia Alliance for Secure Computing and Networking (VASCAN) Cooperative IT security efforts were already underway among four Higher Education institutions Governor Mark Warner charged higher education to help meet IT goals of the Commonwealth Higher Education CIO Council developed plan in response JMU and GMU cybersecurity research centers’ charge to assist State in meeting security goals

5. VASCAN Purpose Strengthen security programs across Virginia higher education by integrating and making available field-proven tools, best practices, and people from VA SCAN partner institutions Establish links to security research, instruction, and federal/state government initiatives to enhance security opportunities

6. Charter Members Security Practitioners at ◦ George Mason University ◦ James Madison University ◦ University of Virginia ◦ Virginia Tech Security Researchers at ◦ Institute for Infrastructure and Information Assurance (JMU) ◦ Center for Secure Information Systems (GMU) ◦ Critical Infrastructure Protection Project (GMU/JMU)

7. Membership Changes Expanded to include IT auditor participation and development of IT auditing resources (October 2005) Virginia Commonwealth University joined alliance (February 2006) Virginia Beach City Public Schools joined alliance (March 2007)

8. Policy& Process People Technology Systems must be built to technically adhere to policy People must understand their responsibilities regarding policy Policies must be developed, communicated, maintained and enforced Processes must be developed that show how policies will be implemented VA SCAN Focus

9. Present Offerings Full service website http://vascan.orghttp://vascan.org Consulting ◦ “Ask the Expert” email service ◦ On–site engagements Annual conference and SANS workshops

10. Benefits Realized Saves security program development time and improves quality Reduces security training costs Helps avoid costs, e.g. security incidents Makes positive statement about quality of IT security within education sector Builds relationships

11. On to the VACAN Site

12. What happens on the Web, stays on the Web….

13. When I Go to UVA….

14. Resources for Meeting Internet Safety Requirements Cheryl Elliott, James Madison University elliotcj@cisat.jmu.edu Bill Johnsen, Virginia Beach City Public Schools William.Johnsen@VBSchools.com Presentation can be found at http://vtlc2007.wikispaces.com/