Page History

...

Case studies are descriptions of real-world, practical, proven solutions to information security challenges implemented by one or more institutions. The intent of these case studies is to provide ideas for approaches which may be adopted or adapted to other another school's particular situationssituation.

By filling in a relatively simple form, a case study is written up and submitted to the Higher Education Information Security Council (HEISC). Once it is received, it is typically reviewed by one or more of the HEISC working groups, including the guide's Editorial Board. This vetting process gives the institution submitting the case study an opportunity to answer questions or add content that enhances its value.

...

1. Download the submission form (or text version)
2. Fill in all of the required fields (Note: All fields are required except Notes and Alternate E-mail)
3. Check the box beneath the Intellectual Property Agreement
4. Print and/or save a copy for yourself (optional)
5. Submit the completed form via e-mail to security-council@educause.edu.
6. The case study submission will be reviewed by the appropriate HEISC working groups, as well as the Information Security Guide Editorial Board.
7. If changes are needed, a working group member or EDUCAUSE staff liaison will contact you and provide further instructions.
8. Once approved, the case study will be linked on the appropriate topic pages (chapters) of this guide.

Case Study Submission Directory

Below is a complete list of case study submissions that are referenced throughout the site (look for this symbol: ). To contribute examples of practices that have been effective in your institution, please use the submission form (or text version).

.

• Building ISO 27001 Certified Information Security Programs at the University of Tampa (2017
• Annual C3 (Cyber Ethics, Safety and Security) Conference: An Educational Springboard (last updated September 2011)
• Application Security for Database Administrators (last updated February 2011)
• Application Security for Developers and Quality Assurance Personnel (last updated February 2011)
• Application Security for Management, Project Managers, and Architects (last updated February 2011)
• Collaborative Information Security Project - Vulnerability Assessments
• Developing a Certification Authority for PKI at Virginia Tech (last updated May 2011)
• Edge Access Control Lists at Cornell University
• Enhancing Application Security With a Web Application Firewall (last updated February 2011)
• Firewall Strategy at Brown University
• Five-Year Rotating Audit Focus Based on Risk Assessment at Georgia Tech
• Homegrown Wireless LAN Security
• Identity Assurance at Virginia Tech (last updated July 2012)
• Identity Finder at The University of Pennsylvania (last updated May 2010)
• Implementing Information Security Governance Using ISO27000 at Georgia State University (last updated October 2008)
• Incident Response at University of Wisconsin-Madison
• Intrusion Detection at University of Notre Dame
• Lessons Learned from RIT's First Security Posture Assessment
• Monitoring and Network Forensics at the University of Chicago
• Network Registration System Scanner
• Responding to Large Scale Incidents at UFL
• Responding to Major Incidents at Indiana University
• Security Log Analysis for Windows NT/2000/XP/2003
• Self-Service/Automated Security Vulnerability Assessment Program
• Use of LANDesk for Patch and Configuration Management
• Using NAT for Perimeter Protection
• Washtenaw County Cyber Citizenship Coalition (WC4) (last updated June 2011)
• Who's Watching Charlottesville: Community Based Security Awareness (last updated September 2011)
• Whole Disk Encryption Evaluation and Deployment at Baylor University (last updated June 2008)
• 2017)

...

Questions or comments? Contact us.

Except where otherwise noted, this work is licensed under a Creative Commons Attribution-NonCommercial-ShareAlike 34.0 Unported LicenseInternational License (CC BY-NC-SA 4.0).