Topics

Resources by Topic

Information Technology

Computers and information technology are an integral part of college and university life. The increased convenience and power of this technology also brings with it a wide range of compliance concerns, from social media and free speech considerations, to data privacy, identity theft, and copyright issues.

lock icon = Available only to members of the contributing organization.

NIST SP 800-171 Compliance Template
Security Operations Center Case Study
The EDUCAUSE Information Security Almanac 2019
Two-Factor Authentication: Lessons Learned
7 Things You Should Know About Federated Identity
Preparing for GDPR – There’s Still Time!
Cybersecurity: A Collaborative Approach lock icon
The Risks and Liability of Governing Board Members to Address Cyber Security Risks in Higher Education lock icon
Data and Social Media Mistakes to Avoid – For Faculty, Administrators, and Counsel lock icon
Cybersecurity and Prevention of Data Breaches: In-House Counsel’s Role in Assessment, Preparation, and Response lock icon
An Introduction to NIST Special Publication 800-171 for Higher Education Institutions
FBI Public Service Announcement on Fraud Schemes Targeting Universities
Elevating Cybersecurity on the Higher Education Leadership Agenda
Searching for a Smoking Gun, Chasing a Silver Bullet: Data Breaches in Higher Education lock icon
Data Spotlight: Governance, Risk, and Compliance lock icon
The “Secure” Research Enterprise: What Got You Here Won’t Get You There lock icon
IT Risk Register
No Classroom Does Not Mean No Risk: Addressing Potential Claims Involving Online Education and Other Web Access lock icon
College and University Data Breaches: Regulating Higher Education Cybersecurity Under State and Federal Law lock icon
US SAFE WEB Act
The Chief Privacy Officer in Higher Education (2015)
Federal Laws Relating to Cybersecurity: Overview of Major Issues, Current Laws, and Proposed Legislation
Information Security Program Self-Assessment Tool
Social Media Policy Samples lock icon
U.S. Dept. of Education Dear Colleague” Letter on P2P Copyright Infringement”
The Antisocial Effects of Social Media and How Colleges and Universities Can Manage Related Litigation Risks lock icon
Managing the Risk of Data Breaches and Preparing for Security Audits: Lessons Learned from the Field lock icon
Minimum Security Requirements for Federal Information and Information Systems
Electronic Signatures in Global and National Commerce Act (ESign): The Consumer Consent Provision
Cybersecurity: Authoritative Reports and Resources, by Topic
Massive Open Online Courses (MOOCs): Intellectual Propoerty and Related Issues
MOOCs and the Institution’s Duties to Protect Students from Themselves and Others: Brave New World or Much Ado About Nothing?
The 2013 Cybersecurity Executive Order: Overview and Considerations for Congress
Questions and Answers Regarding the Department’s Final Title IX Rule
Employee’s Use of Web 2.0: Take this Job and Tweet It
CAN-SPAM Act 15 USC § 7701 et seq.
Electronic Communications Privacy Act
Digital Millennium Copyright Act (DMCA), 17 USC 512
CAN-SPAM Rule
Massive Open Online Courses (MOOCs): Intellectual Propoerty and Related Issues
European Union General Data Protection Regulation lock icon
Budget-Conscious Information Security Resources
Developing a Risk-Based Security Strategy in Higher Education
EDUCAUSE Cybersecurity Program
Higher Education Community Vendor Assessment Tool
Preparing IT for the Cloud
EDUCAUSE IT Governance, Risk, and Compliance Program
Cyber Liability Insurance FAQs
EDUCAUSE Resource Page on Cloud Computing
EDUCAUSE Resource Page on Emergency Notification
EDUCAUSE Resource Page on Business Continuity Planning
EDUCAUSE Resource Page on Electronic Records Management
EDUCAUSE Resource Page on Data Retention
EDUCAUSE Resource Page on Information Security Governance
EDUCAUSE Resource Page on Incident Handling and Response
NACUA Online Learning Resource Page lock icon
Uniform Electronic Transactions Act 1999 (UETA)
Federal Information Security Management Act (FISMA)
NACUA Cybersecurity Resource Page lock icon
NACUA Social Media Resource Page lock icon
Risk Management Chapter, Information Security Guide
EDUCAUSE Resource Page on the Payment Card Industry Data Security Standard (PCI DSS)
Information Security Guide
Data Incident Notification Toolkit
Electronic Records Management Toolkit
EDUCAUSE Resource Page on Communications Assistance for Law Enforcement Act (CALEA)

  • Email Updates

    Sign Up for Updates

  • Suggest A Resource

    If you have a resource that you would like to recommend for the Higher Education Compliance Alliance, please contact us. We welcome your input!

  • Featured Resources

    Diversity, Equity and Inclusion (DEI) Resources
    An Education Abroad Professional’s Guide to Online Global Learning Experiences
    AACRAO’s Criminal and Disciplinary History in College Admissions Report
    Guidelines for On-Site Academic Advising
    Guidelines for Language Learning Abroad