Educause Security Discussion mailing list archives

Re: computer security vision for next 3-5 years


From: "St Clair, Jim" <Jim.StClair () GT COM>
Date: Wed, 13 Jan 2010 11:32:27 -0600

While not exactly security, but also compliance, I think e-discovery could potentially get ugly at some point. To date, 
there has not been (to my knowledge) a real court precedent or legal "yardstick" to really measure how serious the 
investment must be, but within 3-5 years, and the greater preponderance of electronic records and documents, may make 
it a likelihood.

Best Regards,
James A. St.Clair, CISM, PMP
Senior Manager
Global Public Sector
Grant Thornton LLP
T  703-637-3078
F  703-637-4455
C  703-727-6332
E  jim.stclair () gt com

Youngquist, Jason R. wrote:
My boss asked me this morning to come up with a computer security vision for the next 3-5 years.  Since it is already 
2010, I thought I'd get some input from the community on what would you like to see happen to computer security in 
higher education, how will your job change (if any), and how can we as computer security professionals in higher 
education institutions best protect against the growing threats?

If you've seen any blogs/articles on computer security trends in higher education, please forward them my way.

Here's what I've come up with so far:

*       Social Engineering will still be the easiest way to get confidential information.
*       Multi-factor security will be prevalent.  *       More data breach regulations.
*       PDAs and smart phones will be encrypted due to the sensitive email/ information that they store and how easily 
they are stolen.
*       Anti-virus software will be still used, but application white-listing will become more prevalent.

Some links:
http://media.techtarget.com/searchFinancialSecurity/downloads/FISD09_MainBallroom_Session8_StateofComputerSecurity_Ranum.pdf
http://www.sans.org/security-resources/10_security_trends.pdf



Appreciate any thoughts you can provide.
Jason Youngquist
Information Technology Security Engineer, Security+
Technology Services
Columbia College
1001 Rogers Street, Columbia, MO  65216
(573) 875-7334
jryoungquist () ccis edu
http://www.ccis.edu








The people in the independent firms of Grant Thornton International Ltd provide personalized attention and the highest 
quality service to public and private clients in more than 100 countries. Grant Thornton LLP is the U.S. member firm of 
Grant Thornton International Ltd, one of the six global audit, tax and advisory organizations. Grant Thornton 
International Ltd and its member firms are not a worldwide partnership, as each member firm is a separate and distinct 
legal entity.
In the U.S., visit Grant Thornton LLP at http://www.grantthornton.com/.


In accordance with applicable professional regulations, please understand that, unless expressly stated otherwise, any 
written advice contained in, forwarded with, or attached to this e-mail is not intended or written by Grant Thornton 
LLP to be used, and cannot be used, by any person for the purpose of avoiding any penalties that may be imposed under 
the Internal Revenue Code.
--------------------------------------------------------------------------
This e-mail is intended solely for the person or entity to which it is addressed and may contain confidential and/or 
privileged information. Any review, dissemination, copying, printing or other use of this e-mail by persons or entities 
other than the addressee is prohibited. If you have received this e-mail in error, please contact the sender 
immediately and delete the material from any computer.

Current thread: