Resources for Meeting Resources for Meeting Internet Safety Internet Safety RequirementsRequirements

Cheryl ElliottJames Madison University

Bill JohnsenVirginia Beach City Public Schools

Educational Technology Leadership Conference

December 5, 2007

Educational Technology Plan Educational Technology Plan for Virginiafor VirginiaConnectivity

◦Goal 2 – Ensure sufficient support for ongoing, reliable network operations.

◦Goal 4 – Ensure that school divisions have in place network security, filtering, and disaster recovery plans.

Educational Applications◦Goal 2 – Promote and develop Web-

based applications, services, and resources (online testing)

Internet Safety GuidelinesInternet Safety Guidelines

School Divisions Must Address

Data and network security planProcedures to address breaches

of Internet security and protect students’ safety

Virginia Alliance for Secure Virginia Alliance for Secure Computing and Networking Computing and Networking (VASCAN)(VASCAN)Cooperative IT security efforts were already

underway among four Higher Education institutions

Governor Mark Warner charged higher education to help meet IT goals of the Commonwealth

Higher Education CIO Council developed plan in response

JMU and GMU cybersecurity research centers’ charge to assist State in meeting security goals

VASCAN PurposeVASCAN PurposeStrengthen security programs across

Virginia higher education by integrating and making available field-proven tools, best practices, and people from VA SCAN partner institutions

Establish links to security research, instruction, and federal/state government initiatives to enhance security opportunities

Charter MembersCharter MembersSecurity Practitioners at

◦George Mason University◦James Madison University◦University of Virginia◦Virginia Tech

Security Researchers at ◦Institute for Infrastructure and

Information Assurance (JMU) ◦Center for Secure Information

Systems (GMU)◦Critical Infrastructure Protection

Project (GMU/JMU)

Membership ChangesMembership ChangesExpanded to include IT auditor

participation and development of IT auditing resources (October 2005)

Virginia Commonwealth University joined alliance (February 2006)

Virginia Beach City Public Schools joined alliance (March 2007)

Policy&Process

People

Technology

Systems must be built to technically

adhere to policy

People must understand their responsibilities

regarding policy

Policies must be developed,

communicated, maintained and

enforced

Processes mustbe developed thatshow how policies

will be implemented

VA SCAN FocusVA SCAN Focus

Present OfferingsPresent OfferingsFull service website http://vascan.org

Consulting◦“Ask the Expert” email service◦On–site engagements

Annual conference and SANS workshops

Benefits RealizedBenefits RealizedSaves security program development

time and improves quality

Reduces security training costs

Helps avoid costs, e.g. security incidents

Makes positive statement about quality of IT security within education sector

Builds relationships

On to the VACAN SiteOn to the VACAN Site

What happens on the Web, stays on the Web….

When I Go to UVA….

Resources for Meeting Resources for Meeting Internet Safety Internet Safety RequirementsRequirements

Cheryl Elliott, James Madison University

elliotcj@cisat.jmu.edu

Bill Johnsen, Virginia Beach City Public Schools

William.Johnsen@VBSchools.com

Presentation can be found athttp://vtlc2007.wikispaces.com/