Re: Risk Assessment & Register assistance

[Valerie Vogel <vvogel () EDUCAUSE EDU>]

Here is a link to the session “Peer Cybersecurity Assessments: For and by Higher Education” sepresented by Mark Bruhn 
(IU) and Ryan Knutson (SDSU) at our 2019 Security Professionals Conference. Their slides are available:
https://events.educause.edu/special-topic-events/security-professionals-conference/2019/agenda/peer-cybersecurity-assessments-for-and-by-higher-education

Thank you,
Valerie

Valerie Vogel
Senior Manager, Cybersecurity Program

EDUCAUSE
Uncommon Thinking for the Common Good
direct: 202.331.5374 | Follow HEISC on 
LinkedIn<https://www.linkedin.com/showcase/higher-education-information-security-council-heisc-/> | twitter: 
@HEISCouncil | vvogel () educause edu<mailto:vvogel () educause edu>

From: Security Discussion Group List <SECURITY () LISTSERV EDUCAUSE EDU> on behalf of "Menne, Michael S" <michael.menne 
() MNSU EDU>
Reply-To: Security Discussion Group List <SECURITY () LISTSERV EDUCAUSE EDU>
Date: Thursday, July 25, 2019 at 8:06 AM
To: Security Discussion Group List <SECURITY () LISTSERV EDUCAUSE EDU>
Subject: Re: [SECURITY] Risk Assessment & Register assistance

We haven’t, but are looking into it. I know South Dakota State University has. They did a presentation at Educause 
Security this year.

From: The EDUCAUSE Security Community Group Listserv <SECURITY () LISTSERV EDUCAUSE EDU> On Behalf Of Jim A. Bole
Sent: Thursday, July 25, 2019 9:40 AM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: Re: [SECURITY] Risk Assessment & Register assistance

Has anyone used REN-ISAC for a peer assessment?

https://www.ren-isac.net/public-resources/pas/index.html<https://nam03.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.ren-isac.net%2Fpublic-resources%2Fpas%2Findex.html&data=02%7C01%7C%7Cb85c391af7a142cb6b8808d711119ce5%7Cdd4b037fe626495db0170cc0f7dddb37%7C0%7C0%7C636996639668094204&sdata=FMukpPiQXLw4TTTbciMgod9GmrmW1MyrPV05SiasfgA%3D&reserved=0>

Jim Bole
Director of Information Security
Stevenson University
1525 Greenspring Valley Road
Stevenson, MD, 21153-0641
jbole () stevenson edu<mailto:jbole () stevenson edu> | O: 443-334-2696



From: Ashley Penchion <apenchon () XULA EDU<mailto:apenchon () XULA EDU>>
Sent: Wednesday, July 24, 2019 11:49 AM
Subject: Risk Assessment & Register assistance

Has anyone used a vendor to perform a risk assessment and create a risk register? If so, I'd love to get a few vendor 
names. We're in the market.

Thanks
[Image removed by sender.]
Ashley Penchion
IT Security Officer, Office of Technology Administration
Xavier University of Louisiana
o:
(504) 520-5410
a:
1 Drexel Drive,

New Orleans, LA 70125
w:
www.xula.edu/itc<https://nam03.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.xula.edu%2Fitc&data=02%7C01%7C%7Cb85c391af7a142cb6b8808d711119ce5%7Cdd4b037fe626495db0170cc0f7dddb37%7C0%7C0%7C636996639668104210&sdata=AbSO1IlXcXZ8EVEaJ9Owm2EduXqsG4aV95Ok80EMZ%2FY%3D&reserved=0>
e:
apenchon () xula edu<mailto:apenchon () xula edu>

E-Mail Privacy/FERPA: This communication may contain confidential information and is intended solely for the use of the 
addressee. If you received it in error, please contact the sender at once and delete the message. This communication 
may also contain information subject to restrictions of the Family Educational Rights and Privacy Act (FERPA). Such 
information may not be disclosed or used in any fashion outside the scope of the service for which you are receiving 
the information.