NotesFAQContact Us
Collection
Advanced
Search Tips
Peer reviewed Peer reviewed
Direct linkDirect link
ERIC Number: EJ1016330
Record Type: Journal
Publication Date: 2013
Pages: 10
Abstractor: ERIC
ISBN: N/A
ISSN: ISSN-1527-6619
EISSN: N/A
Higher Education IT Compliance through the Prism of Risk Controls
Feehan, Patrick J.
EDUCAUSE Review, v48 n6 p42-46, 48, 50, 52-54 Nov-Dec 2013
In 2013, compliance issues march, unceasingly, through every aspect of higher education. Yet the intricacies of privacy, information security, data governance, and IT policy as compliance and risk areas within the IT organization can reverberate and impact every other department within the higher education institution. The primary focus is always the information that is received, managed, shared, stored, or destroyed as part of the daily procedures inside any institution. IT compliance in 2013 is blended inside multiple institution functions. Managing risk as an integral part of compliance is an attempt to lower the odds that a bad event will occur or to increase the odds that a good event will occur. Some element of risk will always exist. Incidents, data breaches, hacking, falling for phishing e-mails, viruses, and malware will still affect operations in higher education, though hopefully with lower frequency and severity. Controlling the impact of risks after a vulnerability has been exploited will remain as important as preparing for risks in advance. Only through collaborative compliance and risk discussions can appropriate decisions be made about both the everyday activities and the transformative new technologies that are or will be available to the higher education institution of 2020.
EDUCAUSE. 4772 Walnut Street Suite 206, Boulder, CO 80301-2538. Tel: 303-449-4430; Fax: 303-440-0461; e-mail: info@educause.edu; Web site: http://www.educause.edu
Publication Type: Journal Articles; Reports - Descriptive
Education Level: Higher Education; Postsecondary Education
Audience: N/A
Language: English
Sponsor: N/A
Authoring Institution: N/A
Identifiers - Laws, Policies, & Programs: Family Educational Rights and Privacy Act 1974
Grant or Contract Numbers: N/A