February 8, 2011
How do we advance the university’s adoption of IT Security Framework principles and practices? The security bar gets raised all the time. Security is not a point in time or a single event. It is an ever escalating threshold and a continuous process.
Open Space Summary Report (PDF)
Community Conversation
Below are the questions raised during the community conversation and the hosts that facilitated that discussion.
Plaza Room 1A
How do we educate and engage individual clients and end users? How do we advance the university’s adoption of the IT security framework without significant negative impacts to teaching and research?
Facilitators: Diane Dagefoerde and Les Tannenbaum
Plaza Room 1B
How do we deal with situations where, as IT leaders, we are asked to access someone’s information?
Facilitator: Don Krueger
Plaza Room 4
Why are we not moving to universal 2-factor authentication?
Facilitator: Bruce Posey
Plaza Room 5
Where do you draw the line between secure and paranoia?
Facilitator: Jim Muir
Plaza Room 6
The policies and procedures that may need to be modified/changed to reduce resistance to security policies being implemented.
Facilitator: Chris Friesen
Blue Room Facilitator: Dan Noonan Dining Hall Facilitator: Kelly Davis-Orr
The role of lifecycle management to mitigate exposure risk; how to integrate into the security process.
Central versus distributed organizations and how that impacts speed and implementation.
Sofas in Foyer
How do we assess and evaluate the local costs in terms of implementing, and incorporate that into plans moving forward?
Facilitator: David Blum