Information Security Council

Purpose

Provide overall leadership and direction for the A&M System information security program

Each member has an Information Security Officer (ISO) responsible for ensuring the security of information and Chief Information Officer (CIO) responsible for the management of the member’s information resources. The CIO’s and ISO’s work together in an Information Security Council to further the interests of all members. It allows us to be aware of what each of the members is experiencing, any open issues and any threats that are active or emerging.

Responsibilities

• Oversee A&M System-wide security initiatives
• Monitor major projects and member compliance
• Advise the A&M System CISO on operational issues
• Provide guidance on purchasing direction
• Identify and/or validate collaboration opportunities among members

Common themes and projects we are addressing

• Security Monitoring and Response saturation of member information
• Identity Management across the enterprise through the use of a master identity directory for members, including harmonized identities and roles
• Security Operations Center effectiveness and efficiency along with services for outside (non-A&M) entities
• International regulations impact on A&M System cybersecurity
• Current threats, breaches and exposures
• Current trends and discussion on mitigation
• Secure Enclaves for research and high-value information processing
• Litigation Hold
• Data Security
• Information Security Policy streamlining
• Data Classification, including classification with metadata
• Risk Assessment using the Archer/SPECTRIM platform
• Cybersecurity Awareness
• Incident management, response and communication
• Data Leakage Prevention (DLP)

Contact Danny Miller, the System Chief Information Security Officer, for more information.

Permanent Subcommittees

Cybersecurity Shared Services Governance Board

Purpose

Provide direction, advice and oversight for the service strategy and operations of the Texas A&M University System’s cybersecurity shared services