Financial and government organizations store a good deal of personal information, such as Social Security numbers, birth dates, and addresses. As a result, they have been attractive targets for hackers. Because most of these institutions have improved their access controls, hackers may choose instead to attack organizations with similarly valuable data but lower security.

Read the Case Study at the end of Chapter 7.

• Define a set of policies and procedures that would allow educational institutions to limit vulnerabilities while still allowing students access to academic systems.
• Determine who should be ultimately accountable for ensuring that a security policy is in place and is enforced.
• Identify the person at your school who is responsible for maintaining the security policy and include recommendations as a memo to him or her.