Information and Systems Security/Compliance UNITS 02 Feb 2006

2 Information and Systems Security/Compliance Disaster Recovery/Business Continuity Emergency Preparedness Initiative Seat on the Emergency Operations Planning Committee Developing functional business model for university-wide DR/BCP Model to serve as guideline for Business Resumption Coordination Sub-committee

3 Information and Systems Security/Compliance Disaster Recovery/Business Continuity Template Redesign Program description & information Overall IT department information Overall Unit information Item details

4 Information and Systems Security/Compliance Disaster Recovery/Business Continuity Formalize Unit Coordinator Responsibilities Test of 3 Enterprise Systems HRIS, SES, AIMS Prioritize the restoration order of major systems and services

5 Information and Systems Security/Compliance Compliance Personal Information Protection Act SSN, Credit Cards, Account + Access Code PCI Audit Visa, Mastercard, American Express IT organization, business unit, vendors, merchants

6 Information and Systems Security/Compliance Security Password/passphrase Increased complexity Increased length is expected Ongoing testing Incident Response Protocol Approved!

7 Information and Systems Security/Compliance Security IP filters New filters added Ongoing review Proposals Requirements for Active Directory, NetID feeds Secure handling of SSNs Anti-harvesting measures

8 Information and Systems Security/Compliance Security Statistics

9 Information and Systems Security/Compliance

10 Information and Systems Security/Compliance

11 Information and Systems Security/Compliance

12 Information and Systems Security/Compliance

13 Information and Systems Security/Compliance

14 YOU are the KEY to Information Security !!

15 Questions?

16 Information and Systems Security/Compliance Dave Kovarik (847) Sharlene Mielke (847) Roger Safian (847)