ASU Cybersecurity
Arizona State University Cybersecurity is committed to preserving the availability, confidentiality, and integrity of its information resources while also nurturing the open information-sharing requirements of its academic culture. The university strives to balance these two objectives to ensure that its valuable information assets are protected while still promoting a collaborative and open atmosphere that encourages the free flow of information.
Knowledge based articles
ASU Information Security Training
The new Information Security training has been redesigned to offer an interactive and engaging experience. Beyond the required annual training, there are now monthly Training Bytes to continue to bring awareness to cybersecurity incidents and how to best mitigate those challenges.
SOC - How to Report a Cybersecurity Incident
Arizona State University considers every security event and incident to be of great importance. The severity of the issue determines which groups will be involved in managing and mitigating the risk. The ASU Cybersecurity team is responsible for initiating the process by helping the reporting party determine the issue's nature, level of risk, and severity. This collaboration helps ensure that all security risks are addressed appropriately and effectively.
Vendor IT Risk Assessments
(formerly known as Security Reviews)
The Vendor IT Risk Assessment process identifies third-party IT risk and provides recommended mitigating controls to lower the overall risk to ASU users, systems, and networks
IT Vulnerabilities
(formerly known as IT Risk Management)
The IT Vulnerabilities Team provides expert guidance and consultation on vulnerability prevention and remediation to the University IT community in the effort to continually improve ASU's security posture. The IT Vulnerability Team offers training in the ServiceNow Vulnerability Response (VR) and Application Vulnerability Response (AVR) for remediation of vulnerabilities on network assets and web applications.
- ServiceNow VR: Network Assets
- ServiceNow AVR: Web Applications
- ServiceNow Vulnerability Management Questions & Assistance
Secure Web Development
ASU has an application security course that helps web application developers with best practices on secure coding guidance. Training is recommended for all ASU web application developers and provided via LinkedIn Learning.