Rodney J. Petersen
EDUCAUSE

The Emerging Framework for Information Security Law and Policy

November 7, 2005
3:30pm-4:30pm
Room 151, Computer Science Research Bldg.

Abstract:

Organizations that span both the public and private sector are forced to navigate a maze of local, state, Federal, and international laws that provide a patchwork treatment for information security and privacy. At the same time, lawmakers in Washington, D.C. and state legislatures across the nation continue to grapple with how to respond to the recent flurry of security breaches and compromises of personal information. Organizations, including private and public institutions of higher education, are striving to achieve statutory and regulatory compliance and are also developing and implementing new policies in an effort to protect personal information and minimize institutional risk. This presentation will highlight some of the current legislative proposals and efforts to develop a coherent approach for information protection.

Biography:

Rodney Petersen is a Policy Analyst with EDUCAUSE and the Coordinator of the EDUCAUSE/Internet2 Computer and Network Security Task Force. He is the co-editor of "Computer and Network Security in Higher Education" published in October 2003 as part of the EDUCAUSE Leadership Strategies Series. He is also the author of "A Framework for IT Policy Development" published in EDUCAUSE Review and is a founding member of the Association of College and University Policy Administrators. He was formerly the Director of IT Policy and Planning in the Office of the Vice President and Chief Information Officer at the University of Maryland where he was the founder of Project NEThics - a group whose mission is to ensure responsible use of information technology through user education and enforcement of acceptable use guidelines. He received his law degree from Wake Forest University. His research and writing interests include information security, copyright ownership and use of copyrighted materials, privacy and fair use information practices, censorship and freedom of speech, and institutional policy development for the ethical and appropriate use of information technology in higher education.