Integrating Information Security into the IT Equivalent of a Top-Fuel Dragster

The presenters will describe the process of implementing an information security program at a medium sized liberal arts college, starting with the work done in advance to get the position approved and continuing through the first six months on the job. We will also cover specific recommendations for building partnerships within the organization to get university-wide buy-in, understanding risk tolerance in a new organization, developing an information security plan, and integrating information security into a fast-paced and underresourced IT department.

OUTCOMES: Gain actionable methods to help make administration champions for a new information security program * Learn about the HEISC's Information Security Guide * Learn how to integrate best practices into existing processes without creating undue animosity