Higher Education IT Compliance through the Prism of Risk Controls

Autor/in	Feehan, Patrick J.
Titel	Higher Education IT Compliance through the Prism of Risk Controls
Quelle	In: EDUCAUSE Review, 48 (2013) 6, S.42-46 (10 Seiten) PDF als Volltext Verfügbarkeit
Sprache	englisch
Dokumenttyp	gedruckt; online; Zeitschriftenaufsatz
ISSN	1527-6619
Schlagwörter	Higher Education; Information Technology; Compliance (Legal); Risk Management; Information Management; Information Security; Information Policy; Privacy; Governance; Risk Assessment; Organizational Theories; Organizational Effectiveness; Crisis Management; Emergency Programs; Best Practices; Performance Technology; Human Factors Engineering + Suchen Sie Ihr Suchwort? Hochschulbildung; Hochschulsystem; Hochschulwesen; Informationstechnologie; Risikomanagement; Procurement of information; Informationsbeschaffung; Informationspolitik; Privatsphäre; Education; Educational policy; Financing; Steuerung; Bildung; Erziehung; Bildungspolitik; Finanzierung; Risikoabschätzung; Organisationstheorie; Unternehmenserfolg; Krisenmanagement; Hilfsprogramm
Abstract	In 2013, compliance issues march, unceasingly, through every aspect of higher education. Yet the intricacies of privacy, information security, data governance, and IT policy as compliance and risk areas within the IT organization can reverberate and impact every other department within the higher education institution. The primary focus is always the information that is received, managed, shared, stored, or destroyed as part of the daily procedures inside any institution. IT compliance in 2013 is blended inside multiple institution functions. Managing risk as an integral part of compliance is an attempt to lower the odds that a bad event will occur or to increase the odds that a good event will occur. Some element of risk will always exist. Incidents, data breaches, hacking, falling for phishing e-mails, viruses, and malware will still affect operations in higher education, though hopefully with lower frequency and severity. Controlling the impact of risks after a vulnerability has been exploited will remain as important as preparing for risks in advance. Only through collaborative compliance and risk discussions can appropriate decisions be made about both the everyday activities and the transformative new technologies that are or will be available to the higher education institution of 2020. (ERIC).
Anmerkungen	EDUCAUSE. 4772 Walnut Street Suite 206, Boulder, CO 80301-2538. Tel: 303-449-4430; Fax: 303-440-0461; e-mail: info@educause.edu; Web site: http://www.educause.edu
Erfasst von	ERIC (Education Resources Information Center), Washington, DC
Update	2017/4/10