Databus Issue: 2006 4 10/17/2006
Information Security: Are We Safe?
Carl Fong Executive Director
PDF
Educational organizations today face a global revolution that directly affects our information management practices. As we move forward into the 21st Century, there is an increased need to focus on the overall value of information protected and delivered.
Previous and new legislation on information retention and privacy, along with significant threats of information systems disruptions from hackers, worms, viruses, and terrorists have resulted in a need for a stronger approach to information management, protecting the organization’s most critical asset—its information and reputation. This is true of all organizations, not just K12 Education. However, as Chief Technology Officers, Directors of Information Systems, Directors of Information Technology and the like, we are entrusted by our organizations and the public to protect that information.
Information and the systems that handle it are critical to the operation of virtually all organizations. Access to reliable information has become an indispensable component of conducting business. As educational organizations we collect all kinds of data used for various reports to obtain funding such as in the case of ADA reporting. However, realizing this is a general publication, a disclaimer is as follows:
Information presented will be in a general nature so as not to disclose too much information about our network infrastructure or security.
With that in mind, how do we provide that safety net? In reality, there is no one single appliance or application that can do that because it is a constantly changing environment.
We can, however, set up a basic multilayer environment in which the administrative environment is separate from the educational environment. Most educational organizations have incorporated virtual local area networks (VLANS) into their facility.
Add to that, devices called Intrusion Detection Systems (IDS) that will monitor and detect potential threats. Let’s not forget the old standby of anti-virus, and anti-spyware which adds yet another layer. Finally everybody’s favorite of changing that good old password.
As you read this issue of the Databus, keep in mind that the contributors of the articles have established best practices for their environments and have gone through the painstaking and sleepless nights of securing their environment and then realizing they need to change it again. Is there a light at the end of the tunnel and are we safe?
