![Page 1: The State of the CISO in Higher Education...2016/09/24 · Higher education trends impact information security. -Higher education is under a lot of scrutiny. -The mind-set toward](https://reader036.vdocuments.site/reader036/viewer/2022081607/5f0205727e708231d4022f94/html5/thumbnails/1.jpg)
The State of the CISO in Higher Education
Joanna Grama
Director of Cybersecurity and IT GRC Programs, EDUCAUSE
Lightning Talk
© 2016 Internet2
![Page 2: The State of the CISO in Higher Education...2016/09/24 · Higher education trends impact information security. -Higher education is under a lot of scrutiny. -The mind-set toward](https://reader036.vdocuments.site/reader036/viewer/2022081607/5f0205727e708231d4022f94/html5/thumbnails/2.jpg)
[ 2 ]© 2016 Internet2
https://library.educause.edu/resources/2016/3/the-it-workforce-in-higher-education-2016
2016 CISO Research (Coming Soon to a Webpage Near You)
![Page 3: The State of the CISO in Higher Education...2016/09/24 · Higher education trends impact information security. -Higher education is under a lot of scrutiny. -The mind-set toward](https://reader036.vdocuments.site/reader036/viewer/2022081607/5f0205727e708231d4022f94/html5/thumbnails/3.jpg)
[ 3 ]
Today’s CISO SNEAK PEEK
ECAR CISO Survey Research Report, Forthcoming 2016 Q4
![Page 4: The State of the CISO in Higher Education...2016/09/24 · Higher education trends impact information security. -Higher education is under a lot of scrutiny. -The mind-set toward](https://reader036.vdocuments.site/reader036/viewer/2022081607/5f0205727e708231d4022f94/html5/thumbnails/4.jpg)
[ 4 ]
Today’s CISO SNEAK PEEK
ECAR CISO Survey Research Report, Forthcoming 2016 Q4
![Page 5: The State of the CISO in Higher Education...2016/09/24 · Higher education trends impact information security. -Higher education is under a lot of scrutiny. -The mind-set toward](https://reader036.vdocuments.site/reader036/viewer/2022081607/5f0205727e708231d4022f94/html5/thumbnails/5.jpg)
[ 5 ]
Today’s CISO SNEAK PEEK
ECAR CISO Survey Research Report, Forthcoming 2016 Q4
![Page 6: The State of the CISO in Higher Education...2016/09/24 · Higher education trends impact information security. -Higher education is under a lot of scrutiny. -The mind-set toward](https://reader036.vdocuments.site/reader036/viewer/2022081607/5f0205727e708231d4022f94/html5/thumbnails/6.jpg)
[ 6 ]
Top CISO Responsibilities
At least
90%of CISOs said they are
currently responsible for these duties at their
institution.
SNEAK PEEK
1. Information security policies (including development & compliance)2. Incident management3. Awareness and training4. Information security compliance5. Risk assessment and management6. Organization of information security
ECAR CISO Survey Research Report, Forthcoming 2016 Q4
![Page 7: The State of the CISO in Higher Education...2016/09/24 · Higher education trends impact information security. -Higher education is under a lot of scrutiny. -The mind-set toward](https://reader036.vdocuments.site/reader036/viewer/2022081607/5f0205727e708231d4022f94/html5/thumbnails/7.jpg)
[ 7 ]
CISO Reporting Lines SNEAK PEEK
ECAR CISO Survey Research Report, Forthcoming 2016 Q4
![Page 8: The State of the CISO in Higher Education...2016/09/24 · Higher education trends impact information security. -Higher education is under a lot of scrutiny. -The mind-set toward](https://reader036.vdocuments.site/reader036/viewer/2022081607/5f0205727e708231d4022f94/html5/thumbnails/8.jpg)
[ 8 ]
The Board and the CISO SNEAK PEEK
ECAR CISO Survey Research Report, Forthcoming 2016 Q4
![Page 9: The State of the CISO in Higher Education...2016/09/24 · Higher education trends impact information security. -Higher education is under a lot of scrutiny. -The mind-set toward](https://reader036.vdocuments.site/reader036/viewer/2022081607/5f0205727e708231d4022f94/html5/thumbnails/9.jpg)
[ 9 ]
CISO Influence
SNEAK PEEK
Highly influential
Not at all influential
How influential do you feel you are at your institution?
ECAR CISO Survey Research Report, Forthcoming 2016 Q4
![Page 10: The State of the CISO in Higher Education...2016/09/24 · Higher education trends impact information security. -Higher education is under a lot of scrutiny. -The mind-set toward](https://reader036.vdocuments.site/reader036/viewer/2022081607/5f0205727e708231d4022f94/html5/thumbnails/10.jpg)
[ 10 ]
The Making of a CISO SNEAK PEEK
ECAR CISO Survey Research Report, Forthcoming 2016 Q4
![Page 11: The State of the CISO in Higher Education...2016/09/24 · Higher education trends impact information security. -Higher education is under a lot of scrutiny. -The mind-set toward](https://reader036.vdocuments.site/reader036/viewer/2022081607/5f0205727e708231d4022f94/html5/thumbnails/11.jpg)
Slide 10
1 [email protected] Look at the last item (current infosec position). Should the word "any" be deleted there?Joanna Grama,
![Page 12: The State of the CISO in Higher Education...2016/09/24 · Higher education trends impact information security. -Higher education is under a lot of scrutiny. -The mind-set toward](https://reader036.vdocuments.site/reader036/viewer/2022081607/5f0205727e708231d4022f94/html5/thumbnails/12.jpg)
[ 11 ]
Higher Ed IT Positions in Short Supply (generally)
© 2016 Internet2
![Page 13: The State of the CISO in Higher Education...2016/09/24 · Higher education trends impact information security. -Higher education is under a lot of scrutiny. -The mind-set toward](https://reader036.vdocuments.site/reader036/viewer/2022081607/5f0205727e708231d4022f94/html5/thumbnails/13.jpg)
[ 12 ]
Model for InfoSec Leadership
© 2016 Internet2
● Core Roles● Primary Roles● Discrete Roles● Overarching Role
Technology in Higher Education: Information Security Leadership (March 2016)https://library.educause.edu/resources/2016/3/technology-in-higher-education-information-security-leadership
![Page 14: The State of the CISO in Higher Education...2016/09/24 · Higher education trends impact information security. -Higher education is under a lot of scrutiny. -The mind-set toward](https://reader036.vdocuments.site/reader036/viewer/2022081607/5f0205727e708231d4022f94/html5/thumbnails/14.jpg)
[ 13 ]
Model for InfoSec Leadership
© 2016 Internet2
Technology in Higher Education: Information Security Leadership (March 2016)https://library.educause.edu/resources/2016/3/technology-in-higher-education-information-security-leadership
Category Theme
Higher education trends impact information security. -Higher education is under a lot of scrutiny. -The mind-set toward risk management is shifting.-The CISO position is relatively new in academia.
The CISO position is gaining prominence. -The need for InfoSec leadership is growing. -The need for InfoSec policy and compliance is increasing.
The CISO position is being defined -Portfolios vary from campus to campus.-Reporting lines may differ depending on the institution’s culture.-A strong CISO/CIO partnership is crucial.Professional development for CISOs is critical.
![Page 15: The State of the CISO in Higher Education...2016/09/24 · Higher education trends impact information security. -Higher education is under a lot of scrutiny. -The mind-set toward](https://reader036.vdocuments.site/reader036/viewer/2022081607/5f0205727e708231d4022f94/html5/thumbnails/15.jpg)
[ 14 ]
Thank you!● Please complete an evaluation for this session!
Joanna Grama, [email protected]/security
© 2016 Internet2