Information Security Advisory Committee (ISAC) (IS-G201)
Charge
The Information Security Advisory Committee was established pursuant to Section 9-202(F) of the Arizona Board of Regents Policy Manual to:
- review and recommend policies and standards for minimizing risks to the integrity, confidentiality and availability of information in accordance with applicable laws, policies and best practices
- provide guidance and support to the University Information Security Officer for the implementation and maintenance of the Information Security Program
The Committee recommends strategic direction on the Information Security Program to ensure that it supports the University mission, improves the overall security posture of the University and is appropriately supported, funded and implemented within the University community.
The Committee has responsibility for making recommendations to the UISO.
Composition
Membership is by appointment or application and selection by the Chief Information Officer and the UISO. With the exception of volunteer faculty members who serve academic-year terms, membership is ex officio. Members are selected from various colleges and departments to provide a depth and breadth of experience and knowledge about the University and its academic and business operations, and to offer that expertise in the institution of an effective Information Security Program. Appointed members serve renewable one-year terms. Additional members may be added.
The UISO serves as chair. The chair may appoint ad hoc working groups to deal with specific issues. The chair is responsible for scheduling, convening and conducting meetings.
Ex Officio Voting Members
- Deputy Chief Information Officer
- Assistant Vice President, Research Compliance & Policy
- Assistant Vice President, Risk Management and Safety
- Chair, Information Technology Student Advisory Board
Appointed Voting Members, representing:
- Academic Units, by appointment of the President of the Faculty Senate (2)
- Academic Units (4)
- Business Affairs (1)
- Student Affairs (1)
- Human Resources (1)
- Other Administration (1)
- UITS (3)
Non-Voting Advisory Members
- University Information Security Officer, Chair
- Chief of Police, University of Arizona Police Department
- Chief Auditor, Internal Audit Department
- Director, Information Technology Projects
Voting
- One vote per voting member (or proxy) present at the meeting
- Quorum of 70% of voting members (including proxies)
Member Responsibilities
Meetings are held at least two to three times, or as needed, within the academic year. On average, a minimum commitment of 3-4 hours per meeting is expected of Committee members.
Attendance is required because of the Committee's significant University-wide responsibilities and the necessary quorum for Committee action. A member who must miss a meeting is expected to notify the Chair in advance and appoint a proxy to attend the meeting as his or her representative.
Working Groups
Some of the work of the Committee is performed by working groups that bring together technical and subject matter experts to study particular topics in depth, prepare reports and make recommendations to the larger group. The working groups are appointed ad hoc for a finite term and can be comprised of both Committee members and other members of the University community.
2012-13 Members
- Caroline Garcia, Associate Vice President for Research (voting)
- Steve Holland, Assistant Vice President, Risk Management and Safety; Representative for Business Affairs (voting)
- Jeremy Frumkin, Assistant Dean, Technology Strategy - Library (voting)
- Ken S. McAllister, Associate Professor, RCTE (English), Interim Associate Dean, College of Humanities (voting)
- Aiden Abidov, Associate Professor, College of Medicine (voting)
- William Neumann, Senior Lecturer, Eller College of Management (voting)
- Robert Norwood, Professor, College of Optical Sciences (voting)
- Elizabeth Acree, Registrar, by appointment of the Vice Provost for Enrollment Management, Administration (voting)
- Joel Hauff, Associate Director, Facilities and Operations, Student Union Operations - Student Affairs (voting)
- Joan Feldman, Human Resources (voting)
- Elizabeth Taylor, Deputy Chief Information Officer (voting)
- Derek Masseth, UITS Senior Director, Infrastructure Services (voting)
- Frank Feagans, UITS Senior Director, Enterprise Applications (voting)
- Cathy Bates, University Information Security Officer, Chair (non-voting)
- Anthony Daykin, Chief of Police, University of Arizona Police Department (non-voting)
- Sara Click, Chief Auditor, Internal Audit Department (non-voting)
- Hank Childers, Director, Information Technology Projects (non-voting)
- Danelle Dobbins, Information Technology Student Advisory Board (voting)
Meetings
Thursday, April 2, 2009
Tuesday, October 13, 2009
Tuesday, May 11, 2010
Monday, August 16, 2010
Monday, September 20, 2010
Tuesday, February 22, 2011
Monday, August 1, 2011
Tuesday, December 20, 2011