Information Security Council

Purpose

Provide overall leadership and direction for the A&M System information security program

Each member has an Information Security Officer (ISO) responsible for ensuring the security of information and Chief Information Officer (CIO) responsible for the management of the member’s information resources. The CIO’s and ISO’s work together in an Information Security Council to further the interests of all members. It allows us to be aware of what each of the members is experiencing, any open issues and any threats that are active or emerging.

Resources

Responsibilities

• Oversee A&M System-wide security initiatives
• Monitor major projects and member compliance
• Advise the A&M System CISO on operational issues
• Provide guidance on purchasing direction
• Identify and/or validate collaboration opportunities among members

Common themes and projects we are addressing

• Security Monitoring and Response saturation of member information
• Identity Management across the enterprise through the use of a master identity directory for members, including harmonized identities and roles
• Security Operations Center effectiveness and efficiency along with services for outside (non-A&M) entities
• International regulations impact on A&M System cybersecurity
• Current threats, breaches and exposures
• Current trends and discussion on mitigation
• Secure Enclaves for research and high-value information processing
• Litigation Hold
• Data Security
• Information Security Policy streamlining
• Data Classification, including classification with metadata
• Risk Assessment using the Archer/SPECTRIM platform
• Cybersecurity Awareness
• Incident management, response and communication
• Data Leakage Prevention (DLP)

Contact Danny Miller, the System Chief Information Security Officer, for more information.

Permanent Subcommittees

SOC Governance Board

Purpose

Provide financial oversight, guiding principles, and strategic direction for the Texas A&M University System shared service implementation of the Security Operations Center service