Making Information Security a Shared Responsibility at Harvard Business School

With increasing legislative attention to personal privacy and data protection, a successful information security program must be centered on the shared responsibilities of individuals within the organization, supported by IT professionals. This session will illustrate how Harvard Business School implemented a multifaceted awareness and accountability program to engage faculty and staff to "Share the Responsibility" by raising awareness and engaging them in the information security program, including an open discussion of what worked, what didn't, and lessons learned along the way. Attendees will leave with a practical model for implementing a successful information security program on their campuses.