The Information Security Road Map is strategically aligned with the McMaster IT Strategic Plan towards the achievement of McMaster’s vision and mission.
McMaster’s cooperative and transparent approach to prioritizing and funding information technologies for the institution will include aligned leadership and partnerships across campuses, allowing the institution to reach its highest potential by drawing on the expertise of our talented IT community, enabling engagement, adaptability, and connections at all levels of the institution.
Key Objectives
A standardized, scalable, secure and integrated technology infrastructure is the necessary foundation for transformative information technologies and services at McMaster. This ‘rock solid’ and seamless environment of core capabilities will be fostered through coordination across IT service areas and will provide McMaster with valued and high performance information technologies.
McMaster‘s evolution as a 21st century institution will depend on strategic solutions based on leading edge technologies and innovations, and investments in strong data integrations and automation tools to create ‘delightful’ technologies and world class experiences for students, faculty and staff.
Enterprise IT Security Accountability sits with the Vice President Administration, the AVP and Chief Technology Officer (CTO), Directory of Information Security Services (ISS) and her IT Security team.
Regular IT security updates include any incidents, monitoring, and changes at each meeting throughout the year.
The IT Security Roadmap and each initiative therein will be reviews and endorsed through the IT Governance Standing Committees. Any new IT Security Roadmap initiatives will be reviewed and endorsed by the UT Executive and will be presented to President and Vice Presidents, Deans, etc. Any new IT Security initiatives are to be presented to McMaster BoG Audit and Risk Committee.
To determine the appropriate IS Governance Approach and Structure for McMaster that:
Includes appropriate senior leadership at the level of the Institution that sets the risk appetite and tolerance for information Security Risk; separate from the existing IT Governance and Audit and Risk Committee Oversight.