It's Not A Project: The Journey to a Holistic IT Security Program
Time 10/16/17 09:00AM-09:50AM
Indiana University of Pennsylvania (IUP) initiated several IT security projects in 2012, only to quickly realize "this never goes away". This led to the building of a comprehensive IT security program to increasingly enhance the university's security posture without changing our culture of academic freedom and exploration.
External reviews and evaluations, creation of an in-depth cyber security awareness program, the creation of the Pa. State System's first IT Security Office and completely re-imagined IT security policy, procedures, best practices and guidelines serve as the foundation. Cost-conscious investments in specific hardware, software, key services and professional development opportunities that span our faculty, staff and students provide strong practical benefit.
Tying it together is a continuous improvement mindset coupled with timely external feedback to help ensure these actions are part of a permanent IT security program and not simply a bunch of one-off projects.
Speaker Bill Balint Indiana University of Pennsylvania
Speaker Paul Greiggs Indiana University of Pennsylvania
Primary track Information Security
Secondary tracks Information Security