Information Security Management

Summary: Identity Management Is Coming to Your Campus: Lead, Follow, or Get Out of the Way

Cross-posted to http://www.educause.edu/blog/borwick/SummaryIdentityManagementIsCom/173004.

John Ellis, Heather Mugg, and Jesse Foley from Emory led this pre-conference workshop. Around 8-12 people attended.

Higher education has particular issues with identity management, because one person can play so many roles, e.g. an undergraduate student who then goes to med school, becomes a resident.

Individual site contributors are solely responsible for the content of this web site.

Audits are hygiene factors, not motivators

Our change management procedure was created out of audit concerns. We wanted to ensure that changes to productions were properly approved and documented. Many Universities adopt change management for the same reason--to satisfy audit requirements.

Individual site contributors are solely responsible for the content of this web site.

Qualities of a Great IT Shop, seen through the ITIL v3 Lifecycle

In Computerworld Magazine, Paul Ingevaldson recently wrote an article called "Top 10 qualities of a great IT shop." These qualities include the CIO reporting to the CEO, an executive steering committee, and a focus on the software development lifecycle.

A couple of the qualities relate to ITIL, such as having a security team (loosely Security Management), a disaster recovery process (IT Service Continuity Management), SDLC focus (very loosely Service Design), and participating in the long-range planning (Service Strategy).

The list looks OK to me, so I'm wondering: why don't ITIL concepts show up more often in Paul's list? Here are my guesses:

Individual site contributors are solely responsible for the content of this web site.
Syndicate content