Legal Structure and the Security Professional: A Practical Guide

In 2015, higher education security professional are under the microscope as the threat landscape changes and grows more complicated. Technology consistently improves and reacts, which requires security professionals to view the legal basis of mitigation strategies and how they contract with vendors. This underpinning legal structure is present in security decisions, whether because of laws (e.g., FERPA, GLBA, HIPAA), contracts (e.g., cloud contracts or PCI compliance), or frameworks (e.g., NIST or ISO). Liability decisions attach to technology decisions, and contracting and process decisions impact liability. This seminar will feature higher education attorneys and discuss proper decision making and governance.