IT Security Working Group

The IT Security Working Group is appointed by the CIC Chief Information Officers (CIOs) and is comprised of the senior staff responsible for IT security and security policy. The group shares information and best security practices as well as explores the implications of new security laws to large research institutions.

Incident Cost & Analysis Modeling Projects (ICAMP) I and II

CIC IT Security Working Group

ICAMP I: This first study, published in 1998, was funded by the Chief Information Officers of the Committee on Institutional Cooperation (CIC), the academic consortium of the Big Ten universities plus the University of Chicago. The study was conducted by Virginia Rezmierski and a team of researchers at the University of Michigan. The thirteen CIC schools participated. The objective of the study was to design a cost-analysis model for IT-related incidents and to gather and analyze a sample of such incidents. The entire report is available for viewing and downloading <ICAMP Report I>.

ICAMP II: This second study, published in 2000, was funded by the USENIX Association and had two primary objectives. The first objective was to refine the costing model for calculating user costs for IT-related incidents. The second objective was to investigate the availability of incident frequency data and incident categorization schemes. The study was led by Virginia Rezmierski and researchers at the University of Michigan and involved data collection from the thirteen CIC schools and five other universities. The entire report is available for viewing and downloading: <ICAMP Report II>.