Resources for Meeting Resources for Meeting Internet Safety Internet Safety RequirementsRequirements
Cheryl ElliottJames Madison University
Bill JohnsenVirginia Beach City Public Schools
Educational Technology Leadership ConferenceDecember 5, 2007
Educational Technology Plan Educational Technology Plan for Virginiafor VirginiaConnectivity
◦Goal 2 – Ensure sufficient support for ongoing, reliable network operations.
◦Goal 4 – Ensure that school divisions have in place network security, filtering, and disaster recovery plans.
Educational Applications◦Goal 2 – Promote and develop Web-
based applications, services, and resources (online testing)
Internet Safety GuidelinesInternet Safety GuidelinesSchool Divisions Must Address
Data and network security planProcedures to address breaches
of Internet security and protect students’ safety
Virginia Alliance for Secure Virginia Alliance for Secure Computing and Networking Computing and Networking (VASCAN)(VASCAN)Cooperative IT security efforts were already
underway among four Higher Education institutions
Governor Mark Warner charged higher education to help meet IT goals of the Commonwealth
Higher Education CIO Council developed plan in response
JMU and GMU cybersecurity research centers’ charge to assist State in meeting security goals
VASCAN PurposeVASCAN PurposeStrengthen security programs across
Virginia higher education by integrating and making available field-proven tools, best practices, and people from VA SCAN partner institutions
Establish links to security research, instruction, and federal/state government initiatives to enhance security opportunities
Charter MembersCharter MembersSecurity Practitioners at
◦George Mason University◦James Madison University◦University of Virginia◦Virginia Tech
Security Researchers at ◦Institute for Infrastructure and
Information Assurance (JMU) ◦Center for Secure Information
Systems (GMU)◦Critical Infrastructure Protection
Project (GMU/JMU)
Membership ChangesMembership ChangesExpanded to include IT auditor
participation and development of IT auditing resources (October 2005)
Virginia Commonwealth University joined alliance (February 2006)
Virginia Beach City Public Schools joined alliance (March 2007)
Policy&Process
People
Technology
Systems must be built to technically
adhere to policy
People must understand their responsibilities
regarding policy
Policies must be developed,
communicated, maintained and
enforced
Processes mustbe developed thatshow how policies
will be implemented
VA SCAN FocusVA SCAN Focus
Present OfferingsPresent OfferingsFull service website http://vascan.org
Consulting◦“Ask the Expert” email service◦On–site engagements
Annual conference and SANS workshops
Benefits RealizedBenefits RealizedSaves security program development
time and improves qualityReduces security training costs Helps avoid costs, e.g. security
incidents Makes positive statement about
quality of IT security within education sector
Builds relationships
On to the VACAN SiteOn to the VACAN Site
What happens on the Web, stays on the Web….
When I Go to UVA….
Resources for Meeting Resources for Meeting Internet Safety Internet Safety RequirementsRequirements
Cheryl Elliott, James Madison [email protected]
Bill Johnsen, Virginia Beach City Public Schools
Presentation can be found athttp://vtlc2007.wikispaces.com/
