Compliance, Security and Risk Analysis

Background

Information security is no longer optional. As colleges and universities, we face potential federal and state penalties as a result of a number of recent and not so recent legislation. The Gramm-Leach-Bliley Act (GLBA), Federal Trade Commission (FTC)’s Red Flags Rule, PCI - DSS, recently revised FERPA laws and the ever increasing number of state security breach statutes, to name just a few -- all mandate some form of security program with basic safeguards to protect critical data.

These laws are an institutional governance responsibility and fall on the shoulders of not only IT Directors and CIOs, but CFOs and executive management. In the case of the Red Flags Rule, responsibility even rests on our institutions’ Board of Trustees!

Overview of the “How – To” Compliance Toolkit for the Red Flags Rule

This “How – To” Toolkit is the first in a series of services to assist higher ed institutions in navigating the complexities of information security compliance. This kit includes:

Seven documents to assist with Red Flags Rule compliance
A 90 minute webinar to explain the specifics of the legislation and review the tools provided
One hour of consulting time to answer institution specific questions and provide implementation support

Seven Documents to Assist with Red Flags Rule Compliance
Though further action is required by your institution to reach compliance, this “How – To” Toolkit provides the following templates to get started:

1. Explanation of Red Flags Rule Legislation (FTC 16 CFR Part 681)

Adobe Acrobat pdf document
Document provides a description of the Red Flags Rule in easy to understand English wording

2. Identity Theft Prevention Program Template

Microsoft Word document
Document provides an identity theft prevention program template that must be finalized with institution specific information

3. Guidelines on Identity Theft including Examples of Red Flags

Adobe Acrobat pdf document
Document provides a starter list of areas to be aware of that are likely indicators of identity theft patterns, practices or specific activities (red flags)

4. Red Flags Rule Questionnaire Template

Microsoft Word document·
Document provides a question set to assist schools in working with key departments to identify potential areas where identity theft may occur.

5. Identity Theft Prevention Program Training Presentation Template

Microsoft Powerpoint presentation
Presentation template to be used as a training tool with all employees who will be implementing the Identity Theft Prevention Program. Must be finalized with institution specific information·

6. Red Flags Rule Board of Trustees Briefing Template

Microsoft Word document
Factsheet template to brief senior management on the FTC’s Red Flags Rule and the institution’s Identity Theft Prevention Program. Must be finalized with institution specific information.

7. Project Tracking Template

Microsoft Excel spreadsheet·
Spreadsheet provides a proposed timeline to implement the use of these Red Flags Rule compliance tools

Webinar Details
A 90 minute webinar will be offered on various dates throughout the upcoming months. Available dates are on the Order Form and will be finalized once a contract and payment have been received by iSecure Solutions.

Consulting Time Details
Consulting time of one hour per institution is included in this service offering, to provide individual assistance after participating in the scheduled webinar. Sign up will be finalized once a contract and payment have been received by iSecure Solutions.

How to Purchase iSecure Solutions’ “How – To” Compliance Toolkit for –the Red Flags Rule:

iSecure Solutions is now accepting orders.

Here’s how to order:
1. Print out: Order Form and iSecure Solutions Compliance Template License Agreement located below.
(please click here to download the Order Form)

(please click here to download iSecure Solutions Compliance Template License Agreement)

2. Complete the Order Form by filling in the blanks as indicated.

3. Complete the iSecure Solutions Compliance Template License Agreement by filling in the blanks, signing and dating the document.

4. Mail the Order Form, the iSecure Solutions License Agreement and a check for $3,500 made payable to “iSecure Solutions” to the following address:

                  iSecure Solutions
                  1611 Arran Way
                  Dresher, PA 19025

5. Once the contract and check are received, iSecure Solutions will contact your institution to confirm a specific webinar date, send the seven compliance template documents and schedule the one hour session of consulting time with your school.

Benefits of iSecure Solutions’ “How-To” Compliance Toolkit for the Red Flags Rule:

Provides an afford solution to begin to tackle security compliance at college and university campuses
Starts to create a culture of security awareness and compliance on campus
Provides a foundation for continuous security improvement as each regulation is addressed