ALT Project: Security Resources
Course 2: Security for IT Administrators
Primarily oriented toward computer administrators, this course reminds all administrative personnel who work with sensitive data that IT security is everyone’s job. Specific topics covered that might create a security threat to information are:
- Need for Information Security
- Inappropriate Network Usage
- Loopholes in Network Administration
- Information-Security Regulations
- Information Security Policies and Guidelines
- Asset Classification and Control
- Personnel Security
- Physical and Environmental Security
- Operations Management
- System and Software Management
- Information Management
- Backup Procedures
- Documentation
- Access Control
- System Development and Maintenance
- Compliance
- Key Legislation
- International Standards for Information Security
- Information Security Policies and Guidelines
Similar to the End User course, two customizable units “Security Policies at Your Institution” and “CIO/President’s Directives” have been created but purposefully left blank.
Recommendations for Implementation
Prior to planning any live course offerings in WebCT, including pilots, please contact your institution's WebCT Vista Institutional Administrator to ensure that the appropriate resources and support mechanisms are available.
Prior to implementation, please review each course in detail. Institutional computer use and security polices will need to be reviewed to determine which ones are appropriate to include in the customizable units of the course.
We recommend conducting a small pilot program aimed at the target audience of each course prior to full implementation. This pilot should address the following questions:
- How might this courses be best used to address campus needs?
- When is the best time for the target audience to access this course?
- How many administrators be included in each course for optimal manageability?
- Should this course be a requirement?
- How should administrators be enrolled in the course?
- When should administrators enroll?
- Who should enroll administrators?
- Who has responsibility for making decisions regarding the customizable units?
- Who will be responsible for implementing changes?
- Who has responsibility for tracking the administrators' quiz results and determining if they have “passed”?