Assurance

["Dunker, Mary" <>]

Russ, et.al.,

Here is the link to the presentation from EDUCAUSE Security Professionals 
Conference 2011 that contains the UC-Davis template and other information 
that can help IdPs prepare for their audits. 

http://www.educause.edu/SEC11/Program/SESS09 

Mary
-----------------------------------------------------------------
Mary Dunker
Director, Secure Enterprise Technology Initiatives
Virginia Tech Information Technology
1700 Pratt Drive
Blacksburg, VA 24060
540-231-9327

 
--------------------------------------------------------------------


-----Original Message-----
From: 

 
[mailto:]
 On Behalf Of Roy, Nicholas S
Sent: Friday, May 18, 2012 1:17 PM
To: 

Subject: [Assurance] RE: Other Tools?

Iowa and a bunch of the other CIC schools have done something similar to VT, 
using a gap analysis process on a per-section level to identify gaps, 
determine any remediation needed, type of remediation (technical, process, 
policy change) and documentation needed, and identify possible groups to 
perform the work.  It has worked well for us (Iowa) as a roadmap for gradual 
changes that are getting implemented as we can work them in.

Nick

-----Original Message-----
From: 

 
[mailto:]
 On Behalf Of Russell J Yount
Sent: Thursday, May 17, 2012 9:00 AM
To: 

Subject: [Assurance] RE: Other Tools?

Cynthia,

I am more looking for tools to be used by managers and staff before we get to 
Auditor.

-Russ


-----Original Message-----
From: 

 
[mailto:]
 On Behalf Of Cynthia Haselton
Sent: Thursday, May 17, 2012 9:23 AM
To: 

Subject: [Assurance] RE: Other Tools?

Russell,
Are you asking about tools specifically for auditors?

Cynthia Haselton
Sr. Systems Administrator, MCSE/MCSA 2003 The University of Chicago ITS/DCS
e:  

w:  773.702.2963
p:  773.652.0065

-----Original Message-----
From: 

 
[mailto:]
 On Behalf Of Russell J Yount
Sent: Thursday, May 17, 2012 8:10 AM
To: 

Subject: [Assurance] Other Tools?

The development of management statements about Silver compliance for an 
Auditor to review is addressed by Silver+Assessment+Report+Template-DRAFT in 
wiki.

Are there any tools people are using in the initial review of an 
institution’s infrastructure to document areas of non-compliance and assist 
the development of plans to bring an area into compliance?

-Russ