1. Information and Systems Security/Compliance UNITS 02 Feb 2006

2. 2 Information and Systems Security/Compliance Disaster Recovery/Business Continuity Emergency Preparedness Initiative Seat on the Emergency Operations Planning Committee Developing functional business model for university-wide DR/BCP Model to serve as guideline for Business Resumption Coordination Sub-committee

3. 3 Information and Systems Security/Compliance Disaster Recovery/Business Continuity Template Redesign Program description & information Overall IT department information Overall Unit information Item details

4. 4 Information and Systems Security/Compliance Disaster Recovery/Business Continuity Formalize Unit Coordinator Responsibilities Test of 3 Enterprise Systems HRIS, SES, AIMS Prioritize the restoration order of major systems and services

5. 5 Information and Systems Security/Compliance Compliance Personal Information Protection Act SSN, Credit Cards, Account + Access Code PCI Audit Visa, Mastercard, American Express IT organization, business unit, vendors, merchants

6. 6 Information and Systems Security/Compliance Security Password/passphrase Increased complexity Increased length is expected Ongoing testing Incident Response Protocol Approved!

7. 7 Information and Systems Security/Compliance Security IP filters New filters added Ongoing review Proposals Requirements for Active Directory, NetID feeds Secure handling of SSNs Anti-harvesting measures

8. 8 Information and Systems Security/Compliance Security Statistics

9. 9 Information and Systems Security/Compliance

10. 10 Information and Systems Security/Compliance

11. 11 Information and Systems Security/Compliance

12. 12 Information and Systems Security/Compliance

13. 13 Information and Systems Security/Compliance

14. 14 YOU are the KEY to Information Security !!

15. 15 Questions?

16. 16 Information and Systems Security/Compliance Dave Kovarik (847) 467-5930 david-kovarik@northwestern.edu Sharlene Mielke (847) 467-7804 s-mielke@northwestern.edu Roger Safian (847) 491-4058 r-safian@northwestern.edu security@northwestern.edu