Successfully implementing an information security program in any organization can be one of the most complex undertakings in business today. As a security professional, it is your job to find ways to ...

This Written Information Security Program describes the safeguards implemented by DePauw University to protect confidential data. The goal of the program is to ensure the security of these assets to ...

When reviewing job growth and salary information, it’s important to remember that actual numbers can vary due to many different factors—like years of experience in the role, industry of employment, ...

The management of information risk has become a significant topic for all organizations, small and large alike. But for the large, multi-divisional organization, it poses the additional challenge of ...

A lot of the work I do, especially for clients regulated by the Department of Labor (DOL), involves third-party risk reviews. In 2021, the DOL released a list of cybersecurity best practices. Now, in ...

Every organization, regardless of size or the revenue it generates, needs a security program. According to a recent International Data Corporation (IDC) report, "By 2027, the average enterprise will ...

The purpose of this standard is to provide the University community with a framework for securing information from risks including, but not limited to, unauthorized use, access, disclosure, ...

An information security policy is the foundation of an enterprise security program, ideally establishing in clear language what the organization expects from its security operations based on both its ...

The University at Buffalo Information Technology Office (UBIT)’s Information Security Program addresses the full range of information security issues that affect the university, and establishes a ...

Earlier this year, the U.S. Intelligence Community’s annual threat assessment described “a complex and pivotal international security environment” dominated by geopolitical competition, climate change ...

The purpose of this policy is to assist the organization in its efforts to fulfill its fiduciary responsibilities relating to the protection of information assets and comply with regulatory and ...

The FTC has officially stated that any college or university that complies with the Federal Educational Rights and Privacy Act (FERPA) (20 U.S.C. § 1232g) and that ...