|
Tuesday, October 18, 2016
D203 - Measuring Vendor Cybersecurity
1:30 p.m. - 2:30 p.m.Markman shares the results of an independent cybersecurity risk management audit for a public library system. He stresses that while cybersecurity must include raising public knowledge in regard to issues and resources, and libraries are indeed the perfect place to disseminate this knowledge, librarians are also in a unique position as the gatekeepers of information services provided to the public. Therefore, he believes libraries should conduct internal audits to ensure our content partners and IT vendors take cybersecurity as seriously as we do. One way to do this is through periodic reviews of existing vendor relationships and their policies. He introduces a simple way to measure vender cybersecurity, a grading system librarians can adopt or modify to help take their first step toward securing libraries and library patrons.