UCISA Information Security Management Toolkit

Total Page:16

File Type:pdf, Size:1020Kb

UCISA Information Security Management Toolkit UCISA Information Security Management Toolkit Edition 1.0 Volume 1 UCISA UCISA is the Universities and Colleges Information Systems Association. UCISA is a membership organisation representing almost all the higher education institutions in the UK. It exists to promote best practice and to act as a representative and lobbying body. Copyright This publication is licensed under the Creative Commons Attribution-NonCommercial 4.0 International licence. Subject to the source being appropriately acknowledged and the licence terms preserved, it may be copied in whole or in part and incorporated into another document or shared as part of information given, except for use for commercial gain. The publication also contains resources from institutions; where this material is copied or otherwise reused, both UCISA and the institution concerned should be acknowledged. Disclaimer The information contained herein is believed to be correct at the time of issue, but no liability can be accepted for any inaccuracies. The reader is reminded that changes may have taken place since issue, particularly in rapidly changing areas, such as internet addressing, and consequently URLs and email addresses should be used with caution. UCISA cannot accept any responsibility for any loss or damage resulting from the use of the material contained herein. Availability The UCISA Information Security Management Toolkit is freely available to download for non-commercial use from www.ucisa.ac.uk/ismt Further printed copies of this document may be obtained from UCISA. I am very pleased to present the UCISA Information Security Management Toolkit, a new resource that has been created from within our community in order to offer guidance and advice on information security management (ISM); to enable colleagues from across the sector to demonstrate locally why ISM is important and to help universities and colleges implement their own information security management systems. I consider this publication to be a significant addition to the suite of materials that UCISA provides to the sector, and I hope that you find it useful within your institution. John Cartwright, Director of Computing Services, University of Liverpool UCISA Chair Cyber security is an increasingly business critical issue for universities. Universities operate on the trust of students, staff and partners to manage information safely and securely. Furthermore, universities produce research of great value which can be a target for a variety of economic and political reasons. The UCISA Information Security Management Toolkit is an important guide for security practitioners working toward implementing proportionate risk based controls in complex institutions. Paul Clark, Director of Policy, Universities UK Contents Introduction 11 The structure of this document 12 Definitions and standards 12 Route map for using the UCISA Information Security Management Toolkit 13 Resources 14 Reading list 14 1 What is information security 15 1.1 The purpose of information security 15 1.2 Context 15 1.3 Legal and contractual requirements 16 1.4 What is information security management? 16 Summary 16 Resources 17 Reading list 17 2 Information security governance 19 2.1 What is information security governance? 19 2.2 What does information security governance look like? 19 2.3 Identifying stakeholders and interested parties 20 2.4 Oversight and audit 20 2.5 Identifying and securing adequate resources 20 2.6 Example governance structure 21 2.7 Selling an ISMS to top management 21 2.7.1 For all organisations 21 2.7.2 For research intensive organisations 22 2.7.3 Preparing a briefing 22 2.7.4 Preparing a business case 22 Summary 23 Resources 23 Reading list 23 3 Drivers 25 3.1 Overview 25 3.2 Identifying drivers 25 3.3 Identifying requirements 27 3.4 Continual monitoring of drivers 27 Summary 27 Resources 28 Reading list 28 4 Scoping 29 4.1 Introduction 29 4.2 Different scopes 29 4.3 How to define the scope of an ISMS 30 4.3.1 Identify what needs to be protected 30 4.3.2 Understand the organisation 30 4.3.3 Ensure endorsement of scope 30 4.3.4 Monitor and review 30 4.4 Outsourcing and third parties 31 4.4.1 Scoping considerations for cloud and outsourcing services 31 4.4.2 Scope and third party contracts 31 4.4.3 Questions when outsourcing IT or using a cloud provider 32 4.4.4 Example: third parties and PCI DSS 32 4.4.5 Example: outsourced scope in an HE environment 32 Summary 33 Resources 34 Reading list 34 5 Risk assessment 35 5.1 Information risk management 35 5.2 Define information risk measurement criteria 36 5.3 Information asset identification and profiling 36 5.4 Threat identification and assessment 37 5.5 Identify and assess vulnerabilities 37 5.6 Scoring information risk impact assessment 37 5.6.1 Quantitative vs. qualitative information risk assessment 37 5.7 Process 38 5.8 Information risk treatment 38 5.9 Information risk register 39 Summary 39 Resources 40 Reading list 40 6 Controls 41 6.1 What is a control? 41 6.2 Types of controls 41 6.3 Control sets 42 6.3.1 A note on the ISO/IEC 27001 Statement of Applicability 42 6.4 Implementing controls 42 6.5 Assessing and managing change 43 6.6 Documenting controls 43 Summary 44 Resources 44 Reading list 44 7 Information management 45 7.1 What is an information management scheme? 45 7.2 Classification 46 7.3 How many levels? 46 7.3.1 A note on special cases 46 7.3.2 Naming the classifications 47 7.4 Labelling 47 7.5 Handling 47 7.6 Example handling scheme 48 7.7 Documenting the scheme 48 7.7.1 Asset inventories 49 7.7.2 The information management policy and process 49 7.8 Information management as part of an organisation’s ISMS 49 Summary 49 Resources 50 Reading list 50 8 Roles and competencies 51 8.1 Who does information security? 51 8.2 Top management – decision makers 52 8.2.1 Competencies of top management 52 8.3 Asset owners 52 8.3.1 Competencies of asset owners 53 8.4 Dedicated information security roles 53 8.4.1 Competencies of information security professionals 54 8.4.2 Competencies of legal and compliance professionals 54 8.5 Other roles 54 8.5.1 Competencies of research leads 55 8.5.2 Competencies of contractors and third party organisations 55 8.5.3 Competencies of administrators 55 8.5.4 Competencies of all staff 55 8.6 Students 56 8.6.1 Competencies of students 56 Summary 56 Resources 56 Reading list 56 9 Awareness raising 57 9.1 Introduction 57 9.2 Awareness, education and training 57 9.3 Triggers for awareness activities 58 9.4 Foundations of an awareness programme 58 9.5 Identifying channels for an awareness programme 59 9.6 Identifying content for an awareness activity 59 9.7 Arguments for different audiences 60 9.8 Challenges 60 9.9 Evaluating the response 61 9.10 Evaluating the awareness programme 61 Summary 62 Resources 62 Reading list 62 10 Measurement 63 10.1 Why measure? 63 10.2 What is a useful measurement? 63 10.3 How to design a useful measurement 64 10.3.1 Designing measurements of ISMS processes and controls 64 10.3.2 Designing measurements of threat 64 10.4 Evaluating a measurement 64 10.5 How to use measurements 64 10.6 Reporting and interpretation 65 10.7 Examples of effective measurements 65 10.7.1 Measurements of information risk 65 10.7.2 Measurements of ISMS effectiveness 65 10.7.3 Measurements of control effectiveness 66 10.7.3.1 Types of incidents 66 10.7.3.2 Successful attacks vs attempted attacks 66 10.7.3.3 Measuring time to patch 66 10.7.4 Measurements which are controls 66 10.8 Examples of measurements which may be less helpful 66 10.8.1 Level of information security 66 10.8.2 Number of incidents handled 67 Summary 67 Resources 68 Reading list 68 11 When things go wrong: nonconformities and incidents 69 11.1 Introduction 69 11.2 Nonconformities 70 11.2.1 Identifying nonconformities 70 11.2.2 Dealing with nonconformities 70 11.3 Information security incidents 70 11.3.1 The incident response policy and plan 71 11.3.2 Responsibilities and authorities 71 11.3.3 Stages in incident response 71 11.3.4 Review 72 Summary 72 Resources 72 Reading list 72 12 Continual improvement 73 12.1 What is continual improvement? 73 12.2 Processes for improvement 73 12.3 Types of improvement 74 12.4 Steps in an improvement process 75 12.5 Sources of information and opportunities for improvement 75 12.6 Improvement as part of ISMS formalisation 77 12.6.1 Vision for improvement 77 12.6.2 Where are we now? 77 12.6.3 Planning and implementing (where do you want to be and how to get there) 77 12.7 Measurement 78 Summary 78 Resources 78 Reading list 78 13 Policies 79 Summary 79 Resources 80 Reading list 80 14 Conclusion 81 Overall summary 81 Annex – Example resources to accompany the Toolkit 85 Resources for Introduction 87 Different elements of an Information Security Management System – Cardiff University 88 Stages for implementing an Information Security Framework (ISF) programme – Cardiff University 89 Resources for Chapter 1 – What is information security? 91 Template for an information security strategy proposal 92 Resources for Chapter 2 – Information security governance 95 Template for an information security policy 96 Responsibilities overview: Information ownership and risk management – Cardiff University 97 Developing an information security policy – University of York, case study 98 Bringing information security strategy to senior management – UCL, case study 99 Key questions for top management 101 Example of a presentation to sell the concept of an ISMS to top management 104 Resources for Chapter 3 – Drivers 107 Incidental security improvements
Recommended publications
  • Learning and Teaching in Action Volume 11 Issue 1 2015
    Learning and Teaching in Action Volume 11 Issue 1 2015 Special Issue: Open Facilitator Stories Open Facilitator Stories 2014 by CELT & OKF is licensed under a Creative Commons Attribution-NonCommercial-ShareAlike 4.0 International License. Front cover Image Peter McEwan Peter McEwan completed a Btec Foundation Diploma in Art and Design in 2014, and is currently in the second year of the Degree in Illustration with Animation at Manchester Metropolitan University. Peter prefers to sketch from life and favour pen drawn illustrations enhanced with coloured pencils, Photoshop and occasional watercolour. Upon graduation he aims to work as a freelance illustrator. WEBSITE: petermcewan.wordpress.com INSTAGRAM: petermcewanillustration Centre for Excellence in Learning and Teaching Manchester Metropolitan University Published May 2015 Contents Page Article 5 Editorial Charles Neame 6 Open Facilitator Stories: What is this all about? The 2014 Collection Carol Yeager and Chrissi Nerantzi Bring Your Own Devices for Learning 12 Friday night’s alright for open online learning Alex Spiers 17 The importance of social glue in open facilitation, a personal exploration Chrissi Nerantzi 27 My Reflections of being a Facilitator on the BYOD4L course Chris Rowell 33 Facilitating the unknown David Hopkins 37 A facilitator’s journey: a game of two halves… Neil Withnell 44 My role as a facilitator: The value of reflection from multiple personal perspectives Sue Beckingham 52 Facilitating and Residing in a Digital World Sam Illingworth 59 Facilitating an Open Online
    [Show full text]
  • From Flowers to Palms: 40 Years of Policy for Online Learning Janice Smith* University College London, UK
    ALT-J, Research in Learning Technology Vol. 13, No. 2, June 2005, pp. 93–108 From flowers to palms: 40 years of policy for online learning Janice Smith* University College London, UK TaylorCALT110388.sgm10.1080/09687760500104054ALT-J,0968-7769Original2005Association132000000JuneJaniceSmithUniversity+44jsmith@ee.ucl.ac.uk0 (0)20 and Research Article 7679 College(print)/1741-1629Francis for2005 Learning3982 in LtdLondonDepartment Learning Technology Technology(online) of Electronic & Electrical EngineeringTorrington PlaceLondonWC1E 6JEUK This year sees the 40th anniversary of the first policy paper regarding the use of computers in higher education in the United Kingdom. The publication of this paper represented the begin- ning of the field of learning technology research and practice in higher education. In the past 40 years, policy has at various points drawn from different communities and provided the roots for a diverse field of learning technology researchers and practitioners. This paper presents a review of learning technology-related policy over the past 40 years. The purpose of the review is to make sense of the current position in which the field finds itself, and to highlight lessons that can be learned from the implementation of previous policies. Conclusions drawn from the review of 40 years of learning technology policy suggest that there are few challenges that have not been faced before as well as a potential return to individual innovation. Introduction I think there is a world market for maybe five computers. (Watson, 1943) … it is clear that virtual learning is an industry which is striding forward all around us … (David Blunkett, 2000) This year sees the 40th anniversary of the first policy paper regarding the use of computers in higher education in the United Kingdom.
    [Show full text]
  • BLE-Bulletin Rounding up E-Learning News for the Bloomsbury Colleges
    *This bulletin is best viewed in Microsoft Outlook. Please see the attached file if text is unclear* BLE-Bulletin Rounding up e-learning news for the Bloomsbury Colleges Contents Autumn 2012 1. Bloomsbury News 2. Other News Please forward to any colleagues who might 3. Regional & National find this useful Events 4. Resources Your comments and contributions are invited. 5. Funding Please contact the BLE Officer: Opportunities [email protected] 1. Bloomsbury News i) Blackboard Shut Down We’re nearly there… After several years of deliberation, consultation, evaluation, planning and migration to Moodle, the Bloomsbury Blackboard servers will be officially shut down on 31st October 2012. After this time, access to content, courses, grades and student information within Blackboard will not be possible, even for BLE Technical staff. There’s not much time left, but make sure you’ve taken what you need from the site before it’s too late. And here’s to many happy years of Moodle J ii) Arrivals and Departures At the end of the summer, we bid a very sad farewell to Yanna Nedelcheva, the BLE Officer, who took up a post as a learning technologist at the University of Westminster. We wish Yanna every success in her new role and are pleased that she isn’t too far away from Bloomsbury to visit us. In November, Brigitta Goedhuys will be joining the BLE Team to take up the reins. Brigitta joins us from the IOE, where she has worked as a Programme Administrator and so brings a combination of Moodle, pedagogic and administrative experience.
    [Show full text]
  • IT Social Media Toolkit: a Practical Guide to Achieving Benefits
    Social Media Toolkit: a practical guide to achieving benefits and managing risks TOOLKIT UCISA Foreword This Toolkit stems from growing interest in the use of social media within the UCISA community. With institutional stakeholders looking increasingly to their information services departments for support in this area, our members sought a reference guide to help them answer a range of questions on related topics. More than that, however, they were seeking practical, contextual examples of use that would inspire others within their institution to take advantage of the affordances of a set of tools that offer new forms of engagement and ways to enhance many aspects of everyday business practice. We would like to thank the numerous UCISA colleagues, and others within the wider higher education community, who have contributed to the production of this Toolkit by providing examples and reviewing content. We hope the examples given here will encourage many more of you to try new approaches to supporting core university functions via social media tools. Adrian Ellison, Director of IT, University of West London UCISA Executive Committee Secretary Universities and Colleges Information Systems Association University of Oxford 13 Banbury Road Oxford OX2 6NN Tel: +44 (0)1865 283425 Fax: +44 (0)1865 283426 Email: [email protected] www.ucisa.ac.uk UCISA SOCIAL MEDIA TOOLKIT 2 Contents Foreword 2 Executive summary 5 Why should we be interested? 5 What are the benefits? 5 What are the risks? 6 Who needs to read this? 6 1 Purpose of this Toolkit 7 2
    [Show full text]
  • UCAS Council Members Biographies
    UCAS Council Members Biographies David Lowen Independent Governor and Chair of Leeds Beckett University and Deputy Chair of the Committee of University Chairs (CUC) UCAS Council Chair nominated by the CUC David is a television executive of wide experience and consultant adviser to broadcasters, programme makers and financial institutions. He was appointed Chair in December 2015 and is also Deputy Chair of the Committee of University Chairs (CUC), which plays a leading role in governance and regulation of the HE sector. He was board Director of Network Programme Development and later board Director of Corporate Development for ITV Yorkshire Television before leading ITV Network’s digital terrestrial television launch project, the first successful launch in the world. David runs International Television and Media Consulting Ltd, with many European broadcasters among its recent clients. He was “parachuted” into EuroNews by ITN to stabilise successfully the news channel’s finances, legal status, funding and creative structure ahead of the second Gulf War. He was Chairman of SysMedia Group plc, which recently sold its worldwide software development and subtitling business to a US-backed company. He is part-owner and director of Format Futures, a TV content “ideas factory”. He is a former President of CIRCOM, the organisation of Europe’s regional public service broadcasters, and currently President of its programme and TV skills awards. David is Honorary Secretary and trustee of the Royal Television Society; Honorary Fellow of Emmanuel College, Cambridge, and until recently Chairman of the Emmanuel Society (alumni); and Fellow of the Royal Society of Arts. Security marking: PUBLIC Document owner: Legal and Corporate Governance Assistant (Angharad Tompkins) Dr Tim Westlake Chief Operating Officer, University of Sussex; UCAS Council Deputy Chair Nominated to the UCAS Council by UUK (Universities UK) to represent English universities Since August 2017, Dr Tim Westlake has been Chief Operating Officer at the University of Sussex.
    [Show full text]
  • IT the UK Higher Education Learning Space Toolkit
    The UK Higher Education Learning Space Toolkit: a SCHOMS, AUDE and UCISA collaboration TOOLKIT UCISA Foreword The UK HE Learning Space Toolkit has been produced by SCHOMS, AUDE and UCISA to help members from all three professional bodies share best practice and work more effectively when creating learning spaces. We would like to thank the numerous colleagues from across the professional associations, and others within the wider higher education community, who have contributed to the production of this Toolkit by sharing their experiences and reviewing content. We hope this Toolkit will serve both as a practical guide and as a source of inspiration in the design of spaces that delight and motivate students, as well as meet their functional needs. Members of the Standing Conference for Heads of Media Services (SCHOMS) lead and manage a diverse set of educational, technology, media and institutional support services. They give strategic direction to support and promote excellence in teaching and learning practice through the deployment of classroom technology, AV equipment and innovation in the design of learning spaces. www.schoms.ac.uk AUDE, the Association of University Directors of Estates, promotes excellence in the strategic planning, management, operation and development of higher education estates and facilities. www.aude.ac.uk UCISA, the Universities and Colleges Information Systems Association, is a membership organisation representing those responsible for delivering information management systems and technology services in universities,
    [Show full text]
  • Procurement in the Face of a Pandemic
    SUPC Southern Universities Purchasing Consortium Procurement in the Face of a Pandemic SUPC Impact Report 2019/20 SUPC works for universities and is owned by Consulting and the Procurement Shared Service - universities. The HE sector is responding to a sets us apart from others. Our members are part of turbulent year, with Covid-19 adding to already a unique community that represents over a quarter challenging circumstances. Procurement teams of university spend across the sector. are striving to deliver even more with less. We understand universities and work with finance, We engage actively with organisations across procurement and other university staff to find the sector including other consortia and the right procurement solutions to provide professional bodies. Our strategic partnership value for money for the institution, its students, with the London Universities Purchasing and its wider community. Consortium (LUPC) has allowed us to reduce duplication and create new opportunities for Our in-depth knowledge of universities, and joint working across all category areas. specifically how to engage positively with academic areas, is our key strength. Our SUPC’s response to the challenges of the past members know finance and procurement teams year has been to focus on helping members must work together with other departments to deliver efficiencies and meet the rapidly deliver on university and departmental strategic changing demands imposed by the virus. goals which enhance the student experience We recognised that in these unprecedented and research delivery – we are our members’ circumstances, pressure was being placed preferred partner to make this happen. upon your resources and that you and our We understand how to connect strategy to HE community needed more timely, agile, operations to deliver cash and time savings in a way expert support - not less.
    [Show full text]
  • The Calling Notice
    COMPANY NUMBER: 09349804 CHARITY NUMBER: 1161218 UNIVERSITIES AND COLLEGES INFORMATION SYSTEMS ASSOCIATION LIMITED (the Company”) NOTICE is hereby given of the sixth Annual General Meeting (the 'Meeting') of the Company, and the 28th Annual General Meeting of the association, to be held at 12:00 noon on Thursday 10th June 2021 online via MS Teams for the following purposes: 1. To receive Chair’s welcome and apologies received 2. To consider and, if thought fit, approve the following resolutions, to be proposed as Ordinary Resolutions of the Company: A. To approve the minutes of the 2020 Annual General Meeting of the Company held on 11th June 2020. B. To receive and adopt the annual report of the Trustees and the accounts of the Company for the financial year ended 31 December 2020. C. To re-appoint Wenn Townsend the auditors of the Company to hold office from the conclusion of this meeting until the conclusion of the next general meeting of the Company at which audited accounts are laid, and to authorise the directors to fix their remuneration. D. To note the resignations of Mr. Garrod Barker as a Co-opted Trustee and Director of the Company, and Ms. Claire Priestley as an elected Trustee and subsequent appointment as a co-opted Trustee and Director of the Company. E. To consider and, if thought fit, appoint the following honorary officers (each of whom has consented to act) to stand as honorary officers of the Company from the close of this meeting for a term of two years in accordance with its Articles of Association, or as otherwise specified in any future amendments made to the Articles which are approved by the members of the Company: • Adrian Ellison as Chair of the Company.
    [Show full text]
  • THE UK HIGHER EDUCATION SERVICE DESK TOOLKIT 2 the UK HIGHER EDUCATION LEARNING SPACE TOOLKIT Contents
    UCISA TOOLKIT Service Desk Toolkit The UK HigherEducation Foreword As someone who is deeply passionate about the role that service desks can play in supporting and delivering on student experience this Toolkit has been a real labour of love. In the past few years I have seen university service desks push and drive the sector forward, rising from the bottom to leading the pack and as Chair of the UCISA Support Services Group I am immensely proud of what has been achieved. However, we must not rest on our laurels and we will need to continue to use a collaborative and creative approach to continual service improvement if we are to continue to develop and deliver high quality support services. The aim of this Toolkit is to provide the UCISA community with a practical and useful reference guide that will inspire our universities to invest in the service desk. I would like to thank the numerous UCISA colleagues and others within higher education who have not only contributed to the production of this publication but have also been an amazing source of motivation and inspiration. We hope that this Toolkit will encourage many more of you to adopt good practice and implement new approaches for providing effective front line support. Sally Bogg, Head of End User Services, Leeds Beckett University Chair, UCISA Support Services Group The UK higher education sector is undoubtedly a leading light across key service desk areas such as support for bring your own device (BYOD) and utilising social media for customer engagement, and much has been done across the sector to align with service management best practice and work to improve key process maturity.
    [Show full text]
  • LFHE Getting to Grips
    GETTING TO GRIPS WITH INFORMATION AND COMMUNICATIONS TECHNOLOGY RESOURCES FOR GOVERNORS OF UK HIGHER EDUCATION INSTITUTIONS SERIES EDITOR: ALLAN SCHOFIELD GETTING TO GRIPS WITH INFORMATION AND COMMUNICATIONS TECHNOLOGY ISBN: 978-1-906627-44-7 Published March 2013 © Leadership Foundation for Higher Education Registered and operational address: Leadership Foundation for Higher Education Peer House 8-14 Verulam Street London, WC1X 8LZ England Tel: +44 (0)20 3468 4810 Fax: +44 (0)20 3468 4811 E-mail: [email protected] www.lfhe.ac.uk Published by the Leadership Foundation for Higher Education. Extracts from this publication may be reproduced for non-commercial or training purposes on condition that the source is acknowledged and the content is not misrepresented. Funding was provided by the four UK higher education funding bodies, coordinated through Hefce. Acknowledgements: The Leadership Foundation is grateful to all those who have assisted in the development of this material, and in particular to those who acted as reviewers of early drafts. Contributors: Adrian Ellison, University of West London; Anna Mathews, UCISA; Jim Nottingham, Regents College; Luke Taylor, University of Bristol; Peter Tinson, UCISA; Sue White, University of Huddersfield; Steve Williams, Newcastle University. FOREWORD As the governance of universities and higher education (HE) colleges in the UK evolves, there are major implications for members of governing bodies: increasing expectations about how they undertake their role; a greater focus on measuring institutional performance with associated implications for information and strategy; the need to come to terms with the increasingly complex environment in which governance takes place; and so on. All this means that governors (particularly new ones) need to be well prepared for their roles and the challenges they face so that they can contribute effectively to their boards from the outset.
    [Show full text]
  • SCONUL Summer Conference 2012 14 – 15 June 2012
    SCONUL Summer Conference 2012 14 – 15 June 2012 Demonstrating value and maximising impact ipack: part 1 Formal conference papers Liverpool Hilton 3 Thomas Steers Way Liverpool L1 8LW SCONUL Summer Conference 2012 ipack: part 1 Contents Conference programme Page 3 List of delegates Page 6 Speakers’ biographies Page 11 Parallel sessions information Page 25 Evaluation Survey Page 33 Page | 2 SCONUL Summer Conference 2012 ipack: part 1 Conference Programme: Demonstrating value and maximising impact Thursday 14 June 2012 09.30 - 10.30 The SCONUL fringe: pre-conference briefings and seminars 10.00 - 11.00 Conference registration and refreshments Grace Foyer 11.00 - 11.15 Welcome Grace Suite • Fiona Parsons - Conference Chair 11.15 - 12.30 Panel debate: Excellence in the student experience Grace Suite • Nigel Weatherill - Vice-Chancellor, Liverpool John Moores University • Rachel Wenstone - NUS Vice-President for Higher Education • Joe Twyman - Director of Public and Social Research, YouGov • Paul Gentle- The Leadership Foundation • Chair: Ann Rossiter - Executive Director, SCONUL 12.30 - 13.30 Buffet lunch and the SCONUL fringe Grace Suite Foyer 13.30 - 14.30 Parallel sessions on evaluation 1. LibQual & other ARL initiatives Meeting Room 3 • Stephen Town - Director of Information, The University of York • Selena Killick - Library Quality Officer, Cranfield University 2. Delivering efficiency through effective benchmarking Meeting Room 7 • Chris Hale - Deputy Director of Policy, UUK 3. The Balanced Scorecard approach to evaluation Meeting Room 5 • Professor Sheila Corrall - Professor of Librarianship and Information Management, and Graduate Research Tutor, The University of Sheffield • Jacqui Dowd - Management Information Officer, University of Glasgow Meeting Room 4 4.
    [Show full text]
  • Ucisa Annual Review June 2020 – June 2021 Welcome from the Chair
    ucisa Annual Review June 2020 – June 2021 Welcome from the Chair As we look forward to our AGM on 10th June 2021, I am A programme of events was created and has continued between CAUDIT and ucisa on the HE Reference models delighted to introduce this Annual Review of ucisa’s throughout the year, including on-line conferences, which builds on the work of the capability model first activities over the past twelve months. webinars, peer-to peer CPD, study tours and round table published in 2018. events covering a broad range of topics to address the At the beginning of the year in January 2020 I looked back ucisa continues to be a thriving organisation making very challenges facing the education sector. at 2019 with a degree of satisfaction and a level of comfort good progress against the 5-year strategic plan. The knowing that we had worked through 2019 to achieve a To illustrate the progress against goal 4 to optimize the structural and administrative changes made during 2019 significant amount of change and transformation. Entering organisation, goal 3 to offer further membership benefits, have directly contributed to our ability to rapidly respond to 2020 ucisa had become a self-sufficient independently and goal 2 to grow membership and engagement, the events last year enabling us to offer unique opportunities operated organisation employing all its staff, had created comparison between 2019 and 2020 is stark. As an for members to Connect, Share expertise and Transform and recruited to the new role of Chief Executive, and had example, in 2019 ucisa hosted 16 events reaching 1,177 digital approaches, as well as enhancing ucisa’s ability to set up a new office, IT infrastructure and website.
    [Show full text]