CLAC 2016 Conference (Open to CLAC Member Schools Only)

• From Phisher Bait to Cyber Ninja - Andrew Mantuano, Bryn Mawr College 
• Bridging Curriculum to Career: ePortfolios at Mount Holyoke College -  Megan Brooks, Mount Holyoke College 
• If You Build It, They Will Come: Making Technology Accessible - Dave Pfaff, Washington and Lee University   
• PCI: No One's Idea of a Fun Time - Marianne Colgrove, Reed College 
• Partners in Design: Consortial Collaboration for Digital Learning Object Creation - Glynis Asu, Hamilton College 
• Find, Manage, and Mitigate Phished Accounts - Dirk van Assendelft, Washington and Lee University 

In January, 2016, Robert Jasek joined Trinity College and Wesleyan University as their shared Chief Information Security Officer. The arrangement, modeled after a similar collaboration between Bucknell, Franklin & Marshall, and Susquehanna, is the result of extensive planning and discussion between the two schools. In this session, Sue, Dave, and Robert will discuss the journey from concept to reality, including the challenges involved in finding the right person for the job, as well as the numerous opportunities for collaboration that such an arrangement encourages. We will also provide a summary of initiatives underway at each (and often both) campus(es).

“Lock it down!” is the traditional response IT administrators offer when faced with IT risk: Closing firewall ports, removing access privileges, and increasing authentication controls are common responses when IT risk rears its ugly head. While IT risk can rarely, if ever, be avoided, IT risk managers often assume risk mitigation/reduction as a starting point as they seek to protect organizational IT assets and data. In an era of IT consumerization, including bring-your-own-device and cloud-based infrastructure, platform, and software services, such control becomes an illusion as campus community expectations, access, and abilities change. This discussion session will attempt to re-orient IT risk management with risk acceptance as the appropriate starting point, with risk mitigation/reduction a last resort, to unlock IT opportunity for organizational mission and goals.