A Librarian’s Guide to Cybercrime Mitigation
Sponsored by Scholarly Networks Security Initiative
Recorded on 10/06/2022Posted in Library Technology and IT
How can librarians mitigate risk and proactively protect against cybersecurity threats?
Additional resources mentioned in the presentation:
- BSides 2022 – Carlota Sage – $how Me the Money!
- Carlota Sage’s GitHub account with sources referenced in $how Me the Money!
Summary:
With threats to online systems steadily on the rise, cybersecurity has become everyone’s responsibility – both privately and professionally. As higher education undergoes digital transformation, universities are increasingly vulnerable to cyberthreats. Mitigating these risks can be especially challenging for mid to small institutions and their libraries. Panelists include Ben Woelk, speaking from the perspective of the CISO’s office in charge of training and awareness programs at Rochester Institute of Technology, Theda Schwing from the statewide academic library consortium OhioLINK which manages many issues between publishers and libraries in the consortial context, and Carlota Sage from Fractional CISO discussing the special challenges for mid-and small organizations, as well as common situations that may put a user and consequently university and library content and services at risk. The program will include interactive exercises so participants can test their own risk exposure on the open web. Tips for how to proactively protect against threats will also be shared with attendees.
Speakers:
Carlota Sage
vCISOFractional CISOCarlota Sage spent much of her technical career driving the development of technical and customer knowledge bases, including the NETGEAR Support website and Netflix Help Center. Carlota discovered her love for cybersecurity when she took over FireEye’s customer-facing communities in 2014. Over the next 3 years, she helped hundreds of security teams solve hardware, networking, product and security issues while completing her MS in Information and Knowledge Strategy from Columbia University. Since joining the Fractional CISO team in 2021, Carlota has brought her history in knowledge strategy, collaboration and culture to securing small and mid-sized businesses. Carlota also serves on the Board of Directors for The Diana Initiative, a group committed to fostering diversity in cybersecurity.
Theda Schwing
Associate Director of Discovery and DeliveryOhioLINKTheda Schwing is the Associate Director of Discovery and Delivery for OhioLINK. Schwing leads OhioLINK-member technology integration, OhioLINK’s member support site, and shared library services, including the OhioLINK central library catalogs, authentication, document delivery, and discovery services. Her responsibilities also includes managing operations with library vendors. Before coming to OhioLINK, Schwing was the Technical Services Librarian at East Central University in Ada, Oklahoma, and her experience in libraries includes managing local and consortial integrated library systems, cataloging a variety of resource types, coordinating interlibrary print delivery and courier service, and maintaining consortial eResource and link resolver products. Schwing holds an MLIS from Kent State University and bachelor’s degrees in Mathematics and Integrated Mathematics Education from Miami University. She has presented on a range of topics including consortial library catalogs, cataloging ETDs, and government documents.
Ben Woelk
Governance, Awareness, and Training Manager, Information Security OfficeRochester Institute of TechnologyBen Woelk, CISSP, CPTC, is the Governance, Awareness, and Training Manager for the Information Security Office at the Rochester Institute of Technology where he’s developed a leading information security awareness program. Ben is a member and former co-chair of the EDUCAUSE Security Awareness and Training Group of the Higher Education Information Security Council. Ben is also a Fellow and past president of the Society for Technical Communication. Ben holds the CISSP (#379414), CPTC, is a CPTC trainer, and is ITIL v3 certified. Ben holds degrees from the University of Florida, Trinity International University, and the University of Rochester, and an Advanced Certificate in Technical Information Design from RIT. Ben is adjunct faculty at RIT, teaching classroom and online courses in Cyber Security Policy and Law, Technical Communication, and Introverts and Leadership.
Gwen Evans (Moderator)
Vice President, Global Library RelationsElsevierGwen Evans joined Elsevier in 2020 as the Vice President of Global Library Relations. Prior to her current role, Gwen spent seven years as the Executive Director of the state agency and library consortium OhioLINK. From 2006 to 2012, she held the position of Associate Professor and the Coordinator of Library Information and Emerging Technologies at Bowling Green State University.
Gwen has extensive experience with all types of academic libraries and institutions: academic content contract negotiations on the consortial level; statewide affordable textbook initiatives including OER; and leading, maintaining and creating shared collaborative services in a technology-driven environment. She was also active in the International Coalition of Library Consortia, serving as Chair of the Coordinating Committee. Her recent publications include an Ithaka S+R issue brief co-authored with Roger Schonfeld, titled “It’s Not What Libraries Hold; It’s Who Libraries Serve. Seeking a User-Centered Future for Academic Libraries” and “Creating Diversity in Libraries: Management Perspectives” in Library Leadership & Management with co-authors Mihoko Hosoi and Nancy S. Kirkpatrick.
