Minimum Security Standards and Security Planning Assessment Focus Groups

• The Minimum Security Standards (MSS) and Security Planning Assessment (SPA) are two key aspects of the Yale Information Security Program.
• The MSS is Yale’s baseline set of controls. This is meant to be a clear black-and-white statement of what Yale considers an acceptable level of risk. 

In March, the Information Security Office (ISO) reorganized Yale’s Minimum Security Standards (MSS). This was announced in the March 9 edition of IT Update. The purpose of this reorganization is for consolidation and comprehension.

To further efforts on clarifying the MSS and Security Planning Assessment, the ISO invites you to attend a MSS / SPA Improvement Focus Groups.

These Focus Groups will ask targeted questions on how to improve the MSS and the SPA process. The sessions will utilize Mural, an online whiteboarding tool, and open discussion around the barriers to completing these fundamental aspects of our Information Security Program.

Help us by providing your insights on how to improve the MSS and SPA processes. Please sign up for one of the following times.

• Wednesday, June 14 – 2:00 p.m.
• Wednesday, June 21 – 10:00) a.m.
• Thursday, June 22 – 2:00 p.m.
• Wednesday, June 28 – 2:00 p.m.
• Thursday, June 29 – 10:00 a.m.

A more detailed communication will be sent out later this month. This will also include an MSS/SPA improvement survey for those who cannot attend one of these scheduled times.