Ä¢¹½ÊÓƵ

Information Security Portfolio

About

The Information Security portfolio is responsible for educating and empowering the University community to manage risks and protect information and systems, while ensuring technology accessibility for all, including those with disabilities. These efforts are facilitated through policies, standards, risk management, education, evaluation, and guidance provided to our community.

This portfolio includes:

  • Information Security
  • Accounts & Identity
  • Research Computing  
  • Disaster Recovery and Business Continuity Planning for IT 

Vision

Foster a culture of Information Security across the University by empowering users to make informed decisions. 

Portfolio Priority

A Portfolio Priority is not the only work happening in this Portfolio, but it is the highest priority. If we do not make progress on this priority, the Portfolio will not be successful:

Portfolio Priority: Information Security

Implement the security scorecard and risk assessment framework. Results will include the development of initial scorecards for all colleges and a repeatable process for measuring, managing, and reporting progress to colleges and to executive leadership.  

Roadmap

The Information Security roadmap lays out where we currently are and where we expect to be in the coming months and years. This roadmap will be updated regularly to reflect changing industry standards and changing needs within the University, but the overall trajectory should be predictable from semester to semester.

The Information Security portfolio roadmap is coming soon!

Senior Director

Ed Carter

Ed Carter
Chief Information Security Officer and Senior Director, Information Security & Digital Accessibility
OIT
cartere@ohio.edu

Current Initiatives

2024-2025
Security Scorecard

Engage and inform University leadership of their department's security posture using a Security Scorecard that contains key metrics.

2024-2025
PDF Purge

Reduce the number of inaccessible PDFs on OHIO websites by providing relevant training that empowers users to create documents or webpages that are accessible.

2024
Role Recertification Process

Design a process that will enable self-service role management so that managers can support the mitigation of security risk across the University and ensure that employees have the appropriate access to University resources.

Notable Accomplishments

  • Improved OHIO Account Creation Process

    Launched an automated confirmation email containing OHIO account information upon activation, resulting in a better experience for OHIO stakeholders and a reduction in support needs.

  • Migrated to Azure Multi-Factor Authentication

    Completed migration from Duo to , increasing available features and decreasing vendor costs.

  • Implemented an Information Security Governance Structure

    In collaboration with university stakeholders, an Information Security Governance Committee was developed and implemented.

By The Numbers

154
vendors reviewed for security & accessibility in the past year
18
University Information Security Standards
11%
of OHIO employees are trained in cybersecurity

Get Involved

Contact Us

  • For all Information Security feedback, please contact the Product Manager, Alicia Porter.
  • For all Accounts & Identity feedback, please contact the Product Manager, Mikio Olin.