1. Data Security: Perspectives and Opportunities for Collaborations
Robert N. Clark Jr., Georgia Institute of Technology
Derek Kang, University of Florida
Daniel A. Updegrove, University of Texas at Austin
Moderated by: Mark A. Luker, EDUCUASE

2. Georgia Tech Dept. of Internal Auditing - Office of Information
Technology - Information Security Collaborative Process
Event or Incident
Requiring Collaboration
Determine Lead:
- Coordination of Efforts
- Determine Custodians of Data
- Responsibility for Reporting
As Required
Determine
Scope:
Review Method
-Intrusive
-Non Intrusive
Investigation
- Level of Forensics
Determine Potential Outcome:
1) Legal Action, or
2) Administrative Outcome
Ad-Hoc Group Convenes
Director of Internal Auditing
CIO (Assoc. VP Office of Information Technology
Director Information Security
Assoc. VP Human Resources
Chief Legal Advisor
Communication of Results
Determine Resources
Other Resources to be
Considered
o Director of Campus Security
(Police)
o Associate VP Financial
Services
o Director of Institute
Communications
o Unit Head of Affected Area
o Chief Technology Officer
Conduct
Robert Clark, Jr, CIA, CBM, Director of Internal Auditing, Georgia Tech, 5/13/03

3. Georgia Tech Internal Audit

4. UT Austin Data Theft

5. Shands HealthCare (University of Florida affiliate)

6. EDUCAUSE/Internet2 Computer & Network Security Task Force