Get trained on the new way to keep Yale IT Systems secure

On Monday, March 8, Yale’s Information Security Office introduced a new process. The Security Planning Assessment (SPA) is the new way to ensure the security of Yale IT Systems. The SPA process replaced the existing Security Design Review (SDR) process. The new process advances an ITS goal of becoming a standards-based organization and centers around Yale’s Minimum Security Standards (MSS).

Benefits:

• reduces paperwork
• streamlines application of appropriate security controls
• confirms a plan to maintain security for the life of the system
• educates individuals on their responsibility to maintain alignment with the MSS

Information Security will offer two optional lunch and learns on the new SPA process to ITS and IT Partners. ITS and IT Partners will receive the invite to the Zoom lunch and learn sessions by Friday, March 19. We will also post information on the News & Events section of Yale’s Cybersecurity website.

Lunch & Learn dates and times:

• Thursday, March 25, from noon-12:30 p.m.
• Tuesday, March 30, from noon-12:30 p.m.

For more details on this new process, visit the SPA webpage. If you have questions or concerns, please email information.security@yale.edu.