Please report any problems to the Shared Tools Team at st-help@doit.wisc.edu    Broken Links? Missing Macros? WIKI Retiring Plugins
Skip to end of metadata
Go to start of metadata

Previous forum | Next forum

IT Policy Forum, Wednesday, October 31st, 2012, 10:30-12:00, Union S. (TITU)

For discussion results on web application security risk management see: Discussion results.

Agenda:

1. Introduction

2. Update on recently revised policies

Information Incident Reporting (IReport)
Revised:
Aug 10. Published at: http://www.cio.wisc.edu/IReportPolicy.pdf

Storage, Transmission and Encryption of Sensitive Information (IEncrypt)
Status:
Seeking endorsement. Policy and procedure drafts at: IEncrypt Policy Drafts
For continuing work see: EncrypTF

3. Update on Web Accessibility

Web Accessibility Policy
Carrie Nelson, (Library)

Backgound: Current policy, Proposed changes to the Federal Section 508 accessibility standards, ITAccess policy initiative wiki page.

Accessibility/Usability Assessment Tools Requirements Team (ATR)
Joyce Tikalsky (Engineering) and Peter Weil (Communications)

Background: CharterReport

Proposed follow on teams
Casey Schacher (Library)

Accessibility/Usability Assessment Tool Purchase and Implementation (wiki page)
Accessibility/Usability of IT Coordinating Group (wiki page)

4. Web application security risk management

Background
Monica Bush, Office of Campus Information Security (OCIS)

Presentation includes:

  • industry & development environment statistics
  • practical demonstration of the risk
  • some example solutions deployed at other institutions

Small group discussion

Handout: Example solutions

Question: "Using the example solutions as one source of ideas, how might we implement web application security risk management here at UW-Madison?"

Discussion results (raw)

Discussion results organized by topic 

5. Closing and evaluations

Contact:

Judy Caruso
Director, Policy and Planning
judy.caruso@cio.wisc.edu

Gary De Clute
IT Policy Consultant
gdeclute@cio.wisc.edu

 

https://wiki.doit.wisc.edu/confluence/display/POLICY/Home
http://www.cio.wisc.edu/policies

Policy Planning Team

Unable to render {include} The included page could not be found.

Attachments:

  File Modified
PDF File AccessToolProjectCharter20120618.pdf 2012-06-18 Charter of the Accessibility/Usability Assessment Tools Review Team (PDF) Sep 26, 2012 by GARY W DECLUTE
PDF File AccessTeam Recommendations-2012-09-17.pdf 2012-09-17 Final Report of the Accessibility/Usability Assessment Tools Review Team (pdf) Sep 26, 2012 by GARY W DECLUTE
Microsoft Powerpoint Presentation AppSec-2012-10-30.pptx Application Security powerpoint slides (pptx) Oct 29, 2012 by GARY W DECLUTE
PDF File IT+Policy+Forum+2012-10.pdf Printed agenda (pdf) Oct 29, 2012 by GARY W DECLUTE
PDF File AppSec-2012-10-30(abbr).pdf Application Security powerpoint slides (in two pages, abbreviated somewhat to fit) (pptx) Oct 29, 2012 by GARY W DECLUTE
Microsoft Excel Sheet Evaluations-2012-10.xls 2012-10-31 Forum evaluations Nov 13, 2012 by GARY W DECLUTE

Contact

  • No labels