Technical Communications
Technical communications are those practices, technologies or services used to communicate technical information and notifications regarding the status of security-related events and safeguards.
In addition to the communications inherent in security awareness and technical training, effective information technology security requires regular communication to support the timely and meaningful exchange of information regarding:
- new security technology products and/or features, best practices, emerging industry standards, and security safeguards success stories,
- proposed changes to the security infrastructure and associated implementation plans, and
- alerts, status, and recommended actions in response to security attacks. Examples of technical communication medium include internal enterprise list servers, government sponsored security conferences, subscriptions to security research consortiums, etc.
Technical communications are instrumental in the security program because they foster both a proactive stance and a systemic view in addressing security issues within a dynamic business and technology environment.
[Adapted from materials provided by the Virginia
Alliance for Secure Computing
and Networking (VA SCAN -- see http://www.vascan.org
)]
University Technical Communications Standard
- The University will be a member of a series of groups promoting
effective technical communication about security, including:
- VA-SCAN
- VA-CIRT (based at Virginia Tech)
- The EDUCAUSE Security Interest Group
- Other regional and national security information groups (especially those focused on security for Banner Applications and Oracle-based systems)