Cybersecurity Policy for College Trustees

The SANS Institute is a private, for profit organization that provides excellent cybersecurity training, certifications, programs, and resources.  The SANS Institute offers a long list of Cybersecurity and Information Security Policies and Standards templates. From the SANS site:  In partnership, the Cybersecurity Risk Foundation (CRF) and SANS have created a library of free cybersecurity and information security policy templates to help organizations quickly define, document, and deploy key cybersecurity policies. To explore the full set of safeguards, risk, and maturity models behind these templates, visit https://crfsecure.org . If you don't already have a Cybersecurity policy in place, or if you want to compare yours to professional template, download the staff Education Management Policy here . From the SANS site: Building a strong security culture starts with effective education and training programs that empower employees with the knowledge needed to protect sensitive d...

The State of Ransomware in Education 2022 is report created by the well-known and respected security software vendor, Sophos . The key takeaway from the report: "The ransomware challenge facing education organizations continues to grow. The proportion of organizations directly impacted by ransomware has increased considerably over the last year. Furthermore, adversaries have an above-average success rate when it comes to encrypting data in an attack." There's much more in the report. The audience for this report is your college President and leadership team, but the Board needs to be aware of the rising cost of ransomware attacks on higher education. Get this report into the hands of your President.

The Federal Trade Commission's (FTC) Cybersecurity for Small Business Fact Sheets , while not focusing on education, but rather small business, offer terrific summaries of cybersecurity and workplace technology terms. As many college trustees are business managers or owners in their day jobs, you may find this information very useful. Download   Cybersecurity for Small Business  Fa ct Sheets  now.

The Cybersecurity and Infrastructure Security Agency  (CISA) is US government agency that provides information on, well, protecting electronic and non-electronic government resources! The Cyber-Essentials Guide  is a two-page handout with one side focusing on "leadership" essentials and the backside "IT Professional" essentials. The handout is an excerpt from the larger and more detailed  CISA Cyber Essentials Starter Kit. The  CISA Cyber Essentials Starter Kit  is something you should download too, as the document addresses the cultural as well as technical changes required for a successful cybersecurity policy. Start with the  The Cyber-Essentials Guide . Clicking on the buttons below, Policy, Culture, etc... will take you to articles with similar themes.

The SANS Institute is a private, for profit organization that provides excellent cybersecurity training, certifications, programs, and resources. The SANS Institute Leadership Conversation Cheat Sheet is a great, focused primer to discussing and explaining the importance of cybersecurity initiatives. Written for leadership, this non-technical document lays the groundwork for supporting cybersecurity initiatives as part of your organization's overall risk management program. Download the file  now and share it with your leadership team. While you're clicking, download this CISA Cyber-Essentials handout too. The conversation cheat sheet and this handout make for a great starter discussion with leadership. (These were the two handouts I distributed at the November 6, 2025 ICCTA meeting in Rockford.) Clicking on the buttons below, Policy, Culture, etc... will take you to articles with similar themes.