Implementing a System-Wide Risk Mitigation Policy

In 2013, Indiana University approved a policy to reduce cyber-risk by utilizing secure data facilities, reducing the overall number of servers, and ensuring all servers are sufficiently maintained and secured. Before enacting the policy, extensive discussion occurred with deans, faculty, and IT staff, shaping the final version and implementation.

Outcomes: Learn about IU's risk-mitigation policy and how a similar policy might be implemented at your institution * Understand the challenges this policy presented and how to avoid or resolve them * Explore the successes of this policy

Presenters

Mark Bruhn

Peer Assessment Engagement Manager, Indiana University
Charlie Escue

Information Security Manager, Indiana University
Todd Herring

Membership Services Director, REN-ISAC, Indiana University Bloomington
Kim Milford

CISO, University of Illinois at Urbana-Champaign