Memo. UPBC, Executive Committee. James Estrada, Chief Information Officer. Recommendations for additions to CCSU Strategic Plan.
|
|
|
- Noel Davis
- 8 years ago
- Views:
Transcription
1 Memo To: From: Subject: Date: UPBC, Executive Committee James Estrada, Chief Information Officer Recommendations for additions to CCSU Strategic Plan December 26, 2012 Attached are several recommendations for enhancing CCSU s Strategic Plan. These recommendations reflect our growing interest and commitment to protecting the university by improving information security and disaster recovery preparations through risk assessment, planning, and risk mitigation. The recommendations follow the organizational structure of our current Strategic Plan. The only changes I m recommending from the existing plan is to modify the introduction to reflect the addition of a new objective [#8] and to move the existing objective, 4.6, to the new section 8. Everything else in section 8 is new. I am pleased that President Miller has provided a critical review of these recommendations and clearly the assessment components have been strengthened as a result. However, the responsibility for the content is mine. I look forward to discussing these recommendations with you.
2 Purpose: Recommendation of a new goal for CCSU s Strategic Plan. The addition of a new Goal will require the following minor changes to page 6. The Strategic Plan designates seven eight broadly defined goals: (p.6) Goals 8. Enhance and maintain effective operations in information services and infrastructure in support of teaching and student learning. [New, p. 6] Objectives [No changes] Objective 8.1 [formerly 4.6] Maintain a life-cycle funding model to ensure adequate technology refresh to allow the University to meet its academic and administrative technology needs. Reference to Previous Strategic Plans: none ExCom Members: CIO, CFO Assessment Tool: Percentage of computers refreshed within one calendar year beyond the third anniversary of purchase. Baseline: 90% ( ) Goal: 100% Progress: 90% Due to budget reductions in , the policy goal was changed from 3-year refresh cycle to every 4 years: In , 335/1500 computers refreshed. State bond funding was not available during the fiscal year, but has been distributed at end of fiscal year for use in We completed a 25% refresh of all computers in and we have eliminated all computers over 6 years old. Monitor the effectiveness of the new 4-year refresh cycle. Maintain adequate state bond funding for technology (see above). Maintain/increase CIO/IT budget allocations. Maintain sufficient human resources. Budgetary resources were prioritized to privilege training over professional development. Should additional resources become available, professional development opportunities will be funded.
![Enhance and maintain effective operations in information services and infrastructure in support of teaching and student learning. [New, p. 6] Objectives [No changes] Objective 8.1 [formerly 4.](/docs-images/54/9712287/images/page_2.jpg "6] Maintain a life-cycle funding model to ensure adequate technology refresh to allow the University to meet its academic and administrative technology needs.")
3 Objective 8.2 [New] Maintain a life-cycle funding model to ensure adequate technology infrastructure refresh to allow the University to meet its academic and administrative technology needs. Reference to Previous Strategic Plans: none ExCom Member: CIO, CFO, CAO Assessment Tool: Percentage of network and classroom infrastructure refreshed within one calendar year beyond the 6th anniversary of purchase. Baseline: 90% ( ) Goal: 100% Progress: 85% ( ). State bonding funds support purchases of technology infrastructure including servers, switches, and classroom presentation equipment. [Update with data for è in progress] Monitor the effectiveness of the new 6-year refresh cycle. Maintain adequate state bond funding for technology (see above). Maintain/increase CIO/IT budget allocations for complementary non-capital equipment that is essential for operation of infrastructure. Maintain sufficient human resources. There are only 2 FTE technical staff who maintain inventory and operation of critical network equipment. Likewise, there is only 1 FTE who is dedicated to support of classroom presentation equipment. While subcontractors are employed for new installations, support for daily operations is essential that these positions receive regular UA support.
4 Objective 8.3 [New] Enhance security and mitigate risks in all operational activities. Reference to Previous Strategic Plans: [New] ExCom Members: CAO, CFO, CIO, and CHR Assessment Tool: Complete annual risk assessments for each department on campus [New] and report findings to campus and ConnSCU. Conduct annual surveys to measure levels of security compliance. Track data breach incidents and report annually. Complete and assess BOR Information Security Risk Assessment annual evaluation. Baseline: Risk assessment templates completed for Board of Regents in summer Goal: 100% compliance. Progress: Completed first Information Security Risk Assessment, Sept. 1, Developing plans to complete baseline risk assessment tool by June 30, Create a BCP (Business Coordinating Planning) team to oversee the development of a baseline Business Continuity Plan (BCP) that would be updated at least annually. The BCP Team will develop goals, objectives, and timeframes for implementation of the business continuity plan. The BCP Team will work with and enable individual units assess and mitigate risk and will update the risk assessment documentation requested annually by the Board of Regents. Establish roles for newly created Data Stewards and Data Custodians Review and disseminate Records Retention policy and monitor compliance. Develop an Information Security Strategy for CCSU that is consistent with CSU s Information Technology Security Policy (BR#06-10 and BR#06-9) including the implementation of CSUS Information Security Standards. Enhance website, distribute best practices, and increase communication to improve awareness of the importance of information security. Provide training for staff to enable them to identify and secure Personal Identifiable Information (Class A- Restricted) and develop appropriate safeguards for all sensitive data (Class B- Private). Work with related groups (e.g. ConnSCU System Office and auditors) to conduct annual security assessments of procedures and compliance.
5 Objective 8.4 [New] Enhance and maintain the effectiveness of Disaster Preparedness. Reference to Previous Strategic Plans: [New] ExCom Members: CAO, CFO, and CIO Assessment Tool: Annual inventory of Disaster Preparedness in all departments to ensure compliance with updated plans, training of staff, and annual testing. Baseline: Goal: Progress: Compilation of all DR (Disaster Recovery) Plans to date. 100% awareness and participation by all administrative units. Complete baseline Disaster Recovery overview. Complete initial inventory of existing DR plans. Review annual goals and progress of DR Plans. Coordinate annual testing of DR Plans. Prepare annual recommendations for enhancing DR efforts to President and Executive Committee.
EVALUATION REPORT. Weaknesses Identified During the FY 2014 Federal Information Security Management Act Review. March 13, 2015 REPORT NUMBER 15-07
EVALUATION REPORT Weaknesses Identified During the FY 2014 Federal Information Security Management Act Review March 13, 2015 REPORT NUMBER 15-07 EXECUTIVE SUMMARY Weaknesses Identified During the FY 2014
Information Security Policy and Handbook Overview. ITSS Information Security June 2015
Information Security Policy and Handbook Overview ITSS Information Security June 2015 Information Security Policy Control Hierarchy System and Campus Information Security Policies UNT System Information
Utica College. Information Security Plan
Utica College Information Security Plan Author: James Farr (Information Security Officer) Version: 1.0 November 1 2012 Contents Introduction... 3 Scope... 3 Information Security Organization... 4 Roles
Refresher on cloud computing
Refresher on cloud computing Cloud computing is a form of outsourcing where the organization outsources data processing to computers owned by the vendor. Outsourcing may also include utilizing the vendor
Stepping Through the Info Security Program. Jennifer Bayuk, CISA, CISM
Stepping Through the Info Security Program Jennifer Bayuk, CISA, CISM Infosec Program How to: compose an InfoSec Program cement a relationship between InfoSec program and IT Governance design roles and
Information Security Education and Awareness Training
Information Technology Information Security Education and Awareness Training Standard Identifier: IT-STND-002 Revision Date: 8/1/2015 Effective Date: 3/1/2015 Approved by: BOR CIO Approved on date: 10/17/2014
Rowan University Data Governance Policy
Rowan University Data Governance Policy Effective: January 2014 Table of Contents 1. Introduction... 3 2. Regulations, Statutes, and Policies... 4 3. Policy Scope... 4 4. Governance Roles... 6 4.1. Data
IT DISASTER RECOVERY CALIFORNIA STATE UNIVERSITY, CHANNEL ISLANDS. Audit Report 11-30 August 12, 2011
IT DISASTER RECOVERY CALIFORNIA STATE UNIVERSITY, CHANNEL ISLANDS Audit Report 11-30 August 12, 2011 Members, Committee on Audit Henry Mendoza, Chair Melinda Guzman, Vice Chair Margaret Fortune Steven
The Protection Mission a constant endeavor
a constant endeavor The IT Protection Mission a constant endeavor As businesses become more and more dependent on IT, IT must face a higher bar for preparedness Cyber preparedness is the process of ensuring
Patent Public Advisory Committee Meeting. OCIO Update
Patent Public Advisory Committee Meeting OCIO Update John B. Owens II Chief Information Officer September 27, 2012 USPTO Seal IT INFRASTRUCTURE IMPROVEMENT PORTFOLIO - ROAD MAP The Business Problem [In
R345, Information Technology Resource Security 1
R345, Information Technology Resource Security 1 R345-1. Purpose: To provide policy to secure the private sensitive information of faculty, staff, patients, students, and others affiliated with USHE institutions,
INFORMATION SECURITY STRATEGIC PLAN
INFORMATION SECURITY STRATEGIC PLAN UNIVERSITY OF CONNECTICUT INFORMATION SECURITY OFFICE 4/20/10 University of Connecticut / Jason Pufahl, CISSP, CISM 1 1 MISSION STATEMENT The mission of the Information
Report of Audit OFFICE OF INSPECTOR GENERAL. Information Technology Infrastructure Project Management A-07-02. Tammy Rapp Auditor-in-Charge
OFFICE OF INSPECTOR GENERAL Report of Audit Information Technology Infrastructure Project Management A-07-02 Tammy Rapp Auditor-in-Charge FARM CREDIT ADMINISTRATION Memorandum Office of Inspector General
Technical Competency Framework for Information Management (IM)
Technical Competency Framework for Information Management (IM) Office of the Chief Information Officer (OCIO) June 15, 2009 Table of contents IM Competency Framework...1 Competency 1: Information Management
Fiscal Year 2014 Federal Information Security Management Act Report: Status of EPA s Computer Security Program
U.S. ENVIRONMENTAL PROTECTION AGENCY OFFICE OF INSPECTOR GENERAL Information Technology Fiscal Year 2014 Federal Information Security Management Act Report: Status of EPA s Computer Security Program Report.
Risk & Audit Committee California Public Employees Retirement System
California Public Employees Retirement System Consent Agenda Item 5d ITEM NAME: Enterprise Risk Management Division Status Report PROGRAM: Risk Management ITEM TYPE: Information Consent EXECUTIVE SUMMARY
OCCUPATIONAL GROUP: Information Technology. CLASS FAMILY: Security CLASS FAMILY DESCRIPTION:
OCCUPATIONAL GROUP: Information Technology CLASS FAMILY: Security CLASS FAMILY DESCRIPTION: This family of positions provides security and monitoring for the transmission of information in voice, data,
How To Manage Information Security At A University
Data Management & Protection: Roles & Responsibilities Document Version: 1.0 Effective Date: December, 2008 Original Issue Date: December, 2008 Most Recent Revision Date: November 29, 2011 Approval Authority:
NSERC SSHRC AUDIT OF IT SECURITY Corporate Internal Audit Division
AUDIT OF IT SECURITY Corporate Internal Audit Division Natural Sciences and Engineering Research Council of Canada Social Sciences and Humanities Research Council of Canada September 20, 2012 Corporate
NATIONAL CREDIT UNION ADMINISTRATION OFFICE OF INSPECTOR GENERAL
NATIONAL CREDIT UNION ADMINISTRATION OFFICE OF INSPECTOR GENERAL INDEPENDENT EVALUATION OF THE NATIONAL CREDIT UNION ADMINISTRATION S COMPLIANCE WITH THE FEDERAL INFORMATION SECURITY MANAGEMENT ACT (FISMA)
PRIVY COUNCIL OFFICE. Audit of Information Technology (IT) Security. Final Report
An asterisk appears where sensitive information has been removed in accordance with the Access to Information Act and Privacy Act. PRIVY COUNCIL OFFICE Audit of Information Technology (IT) Security Audit
Revision Date: October 16, 2014 Effective Date: March 1, 2015. Approved by: BOR Approved on date: October 16, 2014
Information Security Information Technology Policy Identifier: IT-003 Revision Date: October 16, 2014 Effective Date: March 1, 2015 Approved by: BOR Approved on date: October 16, 2014 Table of Contents
Information Security Plan May 24, 2011
Information Security Plan May 24, 2011 REVISION CONTROL Document Title: Author: HSU Information Security Plan John McBrearty Revision History Revision Date Revised By Summary of Revisions Sections Revised
Evaluation Report. Weaknesses Identified During the FY 2013 Federal Information Security Management Act Review. April 30, 2014 Report Number 14-12
Evaluation Report Weaknesses Identified During the FY 2013 Federal Information Security Management Act Review April 30, 2014 Report Number 14-12 U.S. Small Business Administration Office of Inspector General
TREASURY INSPECTOR GENERAL FOR TAX ADMINISTRATION
TREASURY INSPECTOR GENERAL FOR TAX ADMINISTRATION Treasury Inspector General for Tax Administration Federal Information Security Management Act Report October 27, 2009 Reference Number: 2010-20-004 This
Approved by President Mohammed Qayoumi. Reviews: IT Management Advisory Committee
Policy History Date Action Approved by President Mohammed Qayoumi May 27, 2013 April 9, 2013 Reviews: IT Management Advisory Committee Draft Policy Released Table of Contents Introduction and Purpose...
Evaluation of the Railroad Retirement Board s Disaster Recovery Plan Report No. 06-08, August 14, 2006 INTRODUCTION
Evaluation of the Railroad Retirement Board s Disaster Recovery Plan Report No. 06-08, August 14, 2006 INTRODUCTION This report presents the results of the Office of Inspector General s evaluation of the
2014-2017 Technology Plan
Rockwood School District We do whatever it takes to ensure all students realize their potential. 2014-2017 Technology Plan Rockwood School District 111 East North St. Eureka, MO 63025 (636) 733-2000 www.rockwood.k12.mo.us
Director, IT Security District Office Kern Community College District JOB DESCRIPTION
Director, IT Security District Office Kern Community College District JOB DESCRIPTION Definition Reporting to the Chief Information Officer, the Director of IT Security develops and implements procedures,
CITY OF SAN ANTONIO OFFICE OF THE CITY AUDITOR. Follow-up Audit of Information Technology Services Department. IT Contingency Planning
Follow-up Audit of Information Technology Services Department CITY OF SAN ANTONIO OFFICE OF THE CITY AUDITOR Follow-up Audit of Information Technology Services Department Project No. AU13-F05 October 25,
Business Continuity Management Review
Office of Internal Audit Business Continuity Management Review November 14, 2014 Internal Audit Team Shannon Henry Chief Audit Officer & Executive Director of Institutional Compliance Stacy Sneed Audit
Connecticut State Colleges and Universities (ConnSCU) Transfer and Articulation Policy (TAP) Implementation Plan
Connecticut State Colleges and Universities (ConnSCU) Transfer and Articulation Policy (TAP) Implementation Plan Overview The Board of Regents (BOR) for the Connecticut State Colleges and Universities
Vulnerability Management. Information Technology Audit. For the Period July 2010 to July 2011
O L A OFFICE OF THE LEGISLATIVE AUDITOR STATE OF MINNESOTA FINANCIAL AUDIT DIVISION REPORT Vulnerability Management Information Technology Audit For the Period July 2010 to July 2011 May 22, 2012 Report
DATABASE SECURITY CITYWIDE REPORT NO.
SPECIAL AUDIT REPORT OF DATABASE SECURITY CITYWIDE REPORT NO. 11-103 City of Albuquerque Office of Internal Audit Database Security Citywide Report No. 11-103 Executive Summary The Office of Internal Audit
Department of Public Utilities Customer Information System (BANNER)
REPORT # 2010-06 AUDIT of the Customer Information System (BANNER) January 2010 TABLE OF CONTENTS Executive Summary..... i Comprehensive List of Recommendations. iii Introduction, Objective, Methodology
Section 10.0: Learning Management System (LMS)
Section 10.0: Learning Management System (LMS) Introduction and Table of Contents Introduction This section establishes the standards and procedures for end users of the University System of Georgia (USG)
State Agency Cyber Security Survey v 3.4 2 October 2014. State Agency Cybersecurity Survey v 3.4
State Agency Cybersecurity Survey v 3.4 The purpose of this survey is to identify your agencies current capabilities with respect to information systems/cyber security and any challenges and/or successes
FY13 Information Technology Operational Plan
1a: Work toward building a modern data center and providing data services that support campus units and the strategic goals of the University. Create a technical and financial plan for a data center Q1-
Business Continuity Management Policy
Business Continuity Management Policy Business Continuity Policy Version 1.0 1 Version control Version Date Changes Author 0.1 April 13 1 st draft PH 0.2 June 13 Amendments in line with guidance PH 0.3
BUSINESS CONTINUITY PROGRAM (BCP) HANDBOOK FOR DEPARTMENT BCP TEAMS
BUSINESS CONTINUITY PROGRAM (BCP) HANDBOOK FOR DEPARTMENT BCP TEAMS Version 1.0 9/4/2004 Introduction This handbook gives an overview of Business Continuity Program (BCP) planning for county departments.
Information Technology Security Review April 16, 2012
Information Technology Security Review April 16, 2012 The Office of the City Auditor conducted this project in accordance with the International Standards for the Professional Practice of Internal Auditing
CHAPTER 2016-138. Committee Substitute for Committee Substitute for Committee Substitute for House Bill No. 1033
CHAPTER 2016-138 Committee Substitute for Committee Substitute for Committee Substitute for House Bill No. 1033 An act relating to information technology security; amending s. 20.61, F.S.; revising the
How To Ensure Health Information Is Protected
pic pic CIHI Submission: 2011 Prescribed Entity Review October 2011 Who We Are Established in 1994, CIHI is an independent, not-for-profit corporation that provides essential information on Canada s health
Policy on Business Continuity
Status: Approved Custodian: Executive Office Date approved: 2013-12-04 Implementation date: 2013-12-05 Decision number: SAQA 07102/13 Due for review: 2016-12-03 File Number: Table of contents 1 Preamble...
Report via OMB s Integrated Data Collection (IDC), https://community.max.gov/x/lhtgjw 10
EXECUTIVE OFFICE OF THE PRESIDENT OFFICE OF MANAGEMENT AND BUDGET WASHINGTON, D.C. 20503 June 2, 2016 M-16-12 MEMORANDUM FOR THE HEADS OF DEPARTMENTS AND AGENCIES FROM: Anne E. Rung United States Chief
REQUEST FOR PROPOSALS. Business Continuity Planning Consultant Services APPENDIX C RFP STATEMENT OF WORK EXHIBITS 1-3
REQUEST FOR PROPOSALS Business Continuity Planning Consultant Services APPENDIX C RFP STATEMENT OF WORK EXHIBITS 1-3 EXHIBITS EXHIBIT 1 EXHIBIT 2 EXHIBIT 3 Glossary of Terms and Acronyms Contract Discrepancy
Services Providers. Ivan Soto
SOP s for Managing Application Services Providers Ivan Soto Learning Objectives At the end of this session we will have covered: Types of Managed Services Outsourcing process Quality expectations for Managed
How to Successfully Outsource IT
How to Successfully Outsource IT A Case Study: Reducing Risk, Managing Costs and Improving Efficiencies From the Perspective of Mike Emmons, Senior VP & CFO - YMCA of Greater Houston CHR Solutions. All
Information Security Program Management Standard
State of California California Information Security Office Information Security Program Management Standard SIMM 5305-A September 2013 REVISION HISTORY REVISION DATE OF RELEASE OWNER SUMMARY OF CHANGES
Palm Beach State College. Information Technology. Service Level Agreement
Palm Beach State College Information Technology Service Level Agreement (Revision: Feb 14 2014) Table of Contents Section 1.0 INTRODUCTION 1.1 Purpose and Objective 1.2 Parties to the Agreement 1.3 Commencement
2015 ANNUAL REPORT CHIEF INFORMATION OFFICER UNIVERSITY OF VIRGINIA
Summary In FY2014-15, goals for the CIO areas were aligned around two areas: the Cornerstone Plan (particularly Pillar V, Organizational Excellence, and Pillar II, Research Infrastructure and Services)
Office of Information Technology Hosted Services Service Level Agreement FY2009
Application Name: Application Agreement Start Date: 07/01/08 Customer Name: Customer Agreement Renewal Date: 06/30/09 SLA Number: HSxxxFY09A Service Description: This document describes the technical support
Office of Inspector General
DEPARTMENT OF HOMELAND SECURITY Office of Inspector General Security Weaknesses Increase Risks to Critical United States Secret Service Database (Redacted) Notice: The Department of Homeland Security,
MICHIGAN AUDIT REPORT OFFICE OF THE AUDITOR GENERAL THOMAS H. MCTAVISH, C.P.A. AUDITOR GENERAL
MICHIGAN OFFICE OF THE AUDITOR GENERAL AUDIT REPORT THOMAS H. MCTAVISH, C.P.A. AUDITOR GENERAL The auditor general shall conduct post audits of financial transactions and accounts of the state and of all
NARA s Information Security Program. OIG Audit Report No. 15-01. October 27, 2014
NARA s Information Security Program OIG Audit Report No. 15-01 October 27, 2014 Table of Contents Executive Summary... 3 Background... 4 Objectives, Scope, Methodology... 7 Audit Results... 8 Appendix
Craig Stroud Multnomah County Interim Auditor
Audit of SAP Identity and Access Management April 2009 Craig Stroud Multnomah County Interim Auditor Sarah Landis Deputy Auditor Audit Staff Judith DeVilliers Mark Ulanowicz We conducted this performance
Sample audit Data Center - A Topical Overview
LEGISLATIVE AUDIT DIVISION Scott A. Seacat, Legislative Auditor Tori Hunthausen, Chief Deputy Legislative Auditor Deputy Legislative Auditors: James Gillett Angie Grove MEMORANDUM TO: CC: FROM: DATE: June
Electronic Communication
Electronic Communication Information Technology Policy Identifier: IT-002 Revision Date: 10/1/2015 Effective Date: 10/18/2012 Approved by: BOR Approved on date: 10/18/2012 Table of Contents 1. Introduction...
Institute for Business Continuity Training 1623 Military Road, # 377 Niagara Falls, NY 14304-1745
ECP - 601: Effective Business Continuity Management: ISO 22301 This 3-day course provides an intensive, hands-on workshop covering all major aspects for the design of an effective Business Continuity Plan
Qatar University Information Security Policies Handbook November 2013
Qatar University Information Security Policies Handbook November 2013 Information Security Policies Handbook November 2013 Produced by Information Technology Services Department / Information Security
The Importance of Organizing Your SJSU Information Assets
Standard: Asset Control Page 1 Executive Summary The Asset Control Standard defines the requirements for controlling and ensuring all SJSU computing hardware, software, and confidential assets are identified,
Disaster Recovery Planning Procedures and Guidelines
Disaster Recovery Planning Procedures and Guidelines A Mandatory Reference for ADS Chapter 545 New Reference: 06/01/2006 Responsible Office: M/DCIO File Name: 545mal_060106_cd44 Information System Security
BPA Policy 434-1 Cyber Security Program
B O N N E V I L L E P O W E R A D M I N I S T R A T I O N BPA Policy Table of Contents.1 Purpose & Background...2.2 Policy Owner... 2.3 Applicability... 2.4 Terms & Definitions... 2.5 Policy... 5.6 Policy
A8.800 Disbursing/Accounts Payable and Payroll. A8.845 Procedures to Establish, Close, and Change Custodian/ Alternate - Departmental Checking Account
New Procedure Prepared by the Disbursing Office A8.800 Disbursing/Accounts Payable and Payroll A8.845 Procedures to Establish, Close, and Change Custodian/ Alternate - Departmental Checking Account A8.845
Business Continuity Policy
Business Continuity Policy 1 NHS England INFORMATION READER BOX Directorate Medical Commissioning Operations Patients and Information Nursing Trans. & Corp. Ops. Commissioning Strategy Finance Publications
NIST SP 800-34, Revision 1 Contingency Planning Guide for Federal Information Systems
NIST SP 800-34, Revision 1 Contingency Planning Guide for Federal Information Systems Marianne Swanson NATIONAL INSTITUTE OF STANDARDS AND TECHNOLOGY 1 Table Of Contents Introduction to NIST SP 800-34
Institutional Data Governance Policy
Institutional Data Governance Policy Policy Statement Institutional Data is a strategic asset of the University. As such, it is important that it be managed according to sound data governance procedures.
TRANSFORM CSCU 2020 PREAMBLE
TRANSFORM CSCU 2020 PREAMBLE A post-secondary education is not only critical for Connecticut residents to achieve personal success but also plays a key role in statewide economic expansion and stability.
The University of Alabama at Birmingham. Information Technology. Strategic Plan 2011 2013
The University of Alabama at Birmingham Information Technology Strategic Plan 2011 2013 Table of Contents Message from the Vice President... 3 About UAB... 4 About UAB Information Technology Meeting needs
U.S. Office of Personnel Management. Actions to Strengthen Cybersecurity and Protect Critical IT Systems
U.S. Office of Personnel Management Actions to Strengthen Cybersecurity and Protect Critical IT Systems June 2015 1 I. Introduction The recent intrusions into U.S. Office of Personnel Management (OPM)
Global Statement of Business Continuity
Business Continuity Management Version 1.0-2014 Date October 18, 2014 Status Author Business Continuity Management (BCM) Page 1 of 8 Table of Contents 1. Credit Suisse Business Continuity Statement 3 2.
Oversight of Information Technology Projects. Information Technology Audit
O L A OFFICE OF THE LEGISLATIVE AUDITOR STATE OF MINNESOTA FINANCIAL AUDIT DIVISION REPORT Oversight of Information Technology Projects Information Technology Audit May 29, 2009 Report 09-19 FINANCIAL
Creating Stable Security & Compliance Relationships
Creating Stable Security & Compliance Relationships David Holtzman JD, CIPP/G VP, Compliance CynergisTek, Inc. James Wieland JD Principal Ober Kaler Welcome The slides for today s webinar are available
NATIONAL CREDIT UNION ADMINISTRATION OFFICE OF INSPECTOR GENERAL
NATIONAL CREDIT UNION ADMINISTRATION OFFICE OF INSPECTOR GENERAL SECURITY OF THE NCUA DATA CENTER Report # August 12, 2013 James Hagen Inspector General W. Marvin Stith, CISA Senior IT Auditor Table of
BOR: The Challenge and the Opportunity. BOR Meeting, March 15, 2012
BOR: The Challenge and the Opportunity BOR Meeting, March 15, 2012 Educational success as a driver of economic success If state policymakers want to improve their state s economic performance, then they
Cal Poly Information Security Program
Policy History Date October 5, 2012 October 5, 2010 October 19, 2004 July 8, 2004 May 11, 2004 January May 2004 December 8, 2003 Action Modified Separation or Change of Employment section to address data
FY15 UW-Parkside Institutional IT Plan Report
FY15 UW-Parkside Institutional IT Plan Report A. Information Technology & University Strategic Objectives [1-2 pages] 1. How was the plan developed? The plan is a compilation of input received from a wide
Woodinville Fire and Life Safety District
Woodinville Fire and Life Safety District Class Title: FLSA: Bargaining Unit: Finance Manager Exempt Non-Represented BASIC FUNCTION: Serves as a member of the District management team and as the District
BUSINESS CONTINUITY STRATEGY 2014-2017
BUSINESS CONTINUITY STRATEGY 2014-2017 This strategy covers the period 01 April 2014 31 March 2017 and was approved by the Major Incident Working Group 19.03.2014 Caroline Rushmer Major Incident and Business
Executive Summary Program Highlights for FY2009/2010 Mission Statement Authority State Law: University Policy:
Executive Summary Texas state law requires that each state agency, including Institutions of Higher Education, have in place an Program (ISP) that is approved by the head of the institution. 1 Governance
Guideline for Roles & Responsibilities in Information Asset Management
ISO 27001 Implementer s Forum Guideline for Roles & Responsibilities in Information Asset Management Document ID ISMS/GL/ 003 Classification Internal Use Only Version Number Initial Owner Issue Date 07-08-2009
LAMAR STATE COLLEGE - ORANGE INFORMATION RESOURCES SECURITY MANUAL. for INFORMATION RESOURCES
LAMAR STATE COLLEGE - ORANGE INFORMATION RESOURCES SECURITY MANUAL for INFORMATION RESOURCES Updated: June 2007 Information Resources Security Manual 1. Purpose of Security Manual 2. Audience 3. Acceptable
TERMS OF REFERENCE (TORs) OF CONSULTANTS - (EAG) 1. Reporting Function. The Applications Consultant reports directly to the CIO
TERMS OF REFERENCE (TORs) OF CONSULTANTS - (EAG) Consultant - Enterprise Systems & Applications 1. Reporting Function. The Applications Consultant reports directly to the CIO 2. Qualification and Experience
ADMINISTRATIVE POLICY # 32 8 2 (2014) Information Security Roles and Responsibilities
Policy Title: Information Security Roles Policy Type: Administrative Policy Number: ADMINISTRATIVE POLICY # 32 8 2 (2014) Information Security Roles Approval Date: 05/28/2014 Revised Responsible Office:
NOTICE: This publication is available at: http://www.nws.noaa.gov/directives/.
Department of Commerce National Oceanic & Atmospheric Administration National Weather Service NATIONAL WEATHER SERVICE Instruction 60-701 28 May 2012 Information Technology IT Security Assignment of Responsibilities
2015 Strategic Business Plan Franklin County Data Center Ishreth Sameem, CIO
2015 Strategic Business Plan Franklin County Data Center Ishreth Sameem, CIO Mission The Franklin County Data Center partners with County agencies to deliver cost efficient business solutions and provide
University of California, Riverside Computing and Communications. IS3 Local Campus Overview Departmental Planning Template
University of California, Riverside Computing and Communications IS3 Local Campus Overview Departmental Planning Template Last Updated April 21 st, 2011 Table of Contents: Introduction Security Plan Administrative
The Weill Cornell Medical College and Graduate School of Medical Sciences. Responsible Department: Information Technologies and Services (ITS)
Information Technology Disaster Recovery Policy Policy Statement This policy defines acceptable methods for disaster recovery planning, preparedness, management and mitigation of IT systems and services
UNIVERSITY OF RHODE ISLAND
UNIVERSITY OF RHODE ISLAND Review of AMRC Sub-committee Report on Information Technology February 26, 2015 Goldstein & Associates 2 Contents Section Slide Introduction 3 Executive Summary 4 Review of AMRC
HR & DR Human Resources and Disaster Recovery
HR & DR Human Resources and Disaster Recovery 11/6/2008 Cynthia A. Donovan 510-339-6315 or 562-346-2291 donovan_c@sbcgobal.net or cdonovan@calstate.edu Agenda What is Business Continuity Planning (a.k.a
Introduction and Purpose... 2 Scope... 2 Auxiliary units... 2. Part-Time, Temporary faculty/staff, Volunteer, Contractor and Student Assistants...
Contents Workstation Refresh & Virtual Desktop Infrastructure Program Introduction and Purpose... 2 Scope... 2 Auxiliary units... 2 Part-Time, Temporary faculty/staff, Volunteer, Contractor and Student
PHASE 9: OPERATIONS AND MAINTENANCE PHASE
PHASE 9: OPERATIONS AND MAINTENANCE PHASE During the Operations and Maintenance Phase, the information system s availability and performance in executing the work for which it was designed is maintained.
CMS POLICY FOR THE INFORMATION SECURITY PROGRAM
Chief Information Officer Office of Information Services Centers for Medicare & Medicaid Services CMS POLICY FOR THE INFORMATION SECURITY PROGRAM FINAL Version 4.0 August 31, 2010 Document Number: CMS-CIO-POL-SEC02-04.0
This is the third and final presentation on HIPAA Security Administrative Safeguards. This presentation focuses on the last 2 standards under the
This is the third and final presentation on HIPAA Security Administrative Safeguards. This presentation focuses on the last 2 standards under the HIPAA Security rule: Contingency planning and evaluation.
Missouri Student Information System Data Governance
Nicole R. Galloway, CPA Missouri State Auditor ELEMENTARY AND SECONDARY EDUCATION Missouri Student Information System Data Governance October 2015 http://auditor.mo.gov Report No. 2015-093 Nicole R. Galloway,
Audit of the Data Center Consolidation Initiative at NARA. OIG Draft Audit Report No. 12-09. May 10, 2012
Audit of the Data Center Consolidation Initiative at NARA OIG Draft Audit Report No. 12-09 May 10, 2012 Table of Contents Executive Summary... 3 Background... 4 Objectives, Scope, Methodology... 7 Audit
AUDIT OF INFORMATION TECHNOLOGY Management (Action Plan) Responses February 2005 # PRIORITY DESCRIPTION MANAGEMENT RESPONSE
AUDIT OF INFORMATION TECHNOLOGY Management (Action Plan) Responses February 2005 # PRIORITY DESCRIPTION MANAGEMENT RESPONSE Ref: Chapter 3.1 GOVERNANCE FRAMEWORK Information Technology Steering Committee
BPO Service Level Agreement
BPO Service Level Agreement Versión / Version: 2.2 Código Documento / Document Code: AVSP- ITSM- SD- BPO- SLA Fecha Emisión / Distribution Date: November 30, 2014 Elaboró / Created by: Revisó / Reviewed
CITY UNIVERSITY OF HONG KONG Business Continuity Management Standard
PUBLIC Version: 1.0 CITY UNIVERSITY OF HONG KONG Business Continuity Management Standard (Approved by the Information Strategy and Governance Committee in December 2013; revision 1.1 approved by Chief