Skip to main content

Information Security Advisory Committee

The Information Security Advisory Committee (ISAC) is an IT Governance advisory committee that provides recommendations and updates related to the delivery of the information security program from a comprehensive campus perspective.

Structure

A non-Northwestern Information Technology or information security leader serves as co-chair of this committee with a Northwestern IT associate vice president. The committee reports to the IT Executive Committee for strategic and policy support and the Infrastructure Advisory Committee (IAC) for tactical and operational activities.

Purpose

The committee reviews policies and recommends direction to ensure that the institutional security program is delivered with campus-wide input and direction and that priorities, policies, and programs that are approved are understood and acted upon at the schools and departmental level across campus.

Objectives

  1. Develop an active Northwestern security community to raise awareness on critical threats, vulnerabilities, and other security-related topics.
  2. Identify opportunities and recommend actions on shared security tools and services.
  3. Define and communicate recommended security practices and procedures to the IT@NU community.
  4. Identify and escalate security-related policy questions to the IT governance advisory committees and other appropriate governing bodies (e.g., the Policy Review Committee).
  5. Facilitate tangible improvements to Northwestern’s information technology security posture, protecting data for all members of the community, but in particular for faculty researchers.
  6. Develop University guidelines and best practices for security in response to security events that have or may have an impact on the University community.

Operating Principles

  1. The committee is expected to meet every month, or more frequently if the committee desires.
  2. The committee will maintain an active information set:
    1. Risk list
    2. Incident trends
    3. Projects
  3. The committee lead will report to the IAC quarterly, providing a summary of the active information set.
  4. The committee will provide an annual brief on security at Northwestern based on the previous year’s activities and anticipated next steps.
  5. The committee will interact with other advisory groups as needed for topics that range across groups, including, but not limited to, identity and access management, endpoint management security working group, and security awareness.
  6. The committee may recommend the formulation of a working group where activities recommend this action.

Members

Last Updated: 5 March 2020

Get Help Back to top