REN-ISAC Advisory Groups and Analysis Teams

Executive Advisory Group
Technical Advisory Group
Microsoft Analysis Team

The Executive Advisory Group (EAG) advises REN-ISAC management regarding policies, legal issues, plans and strategies, and other non-technical aspects of REN-ISAC operations.

The EAG is composed of approximately five to seven members and one or more liaisons appointed by REN-ISAC management. EAG members are individuals who are broadly versed in information technology legal, policy, and general security issues and concerns. Chief Information or Technology Officers, university lawyers, and senior IT policy security officers are typical candidates.

Members of the Executive Advisory Group:

	Jack Seuss, chair		University of Maryland-Baltimore County
	Mark Bruhn, ex officio		Indiana University, REN-ISAC
	Ray Ford		University of Montana
	Ken Klingenstein		Internet2 & University of Colorado
	Chris Misra, ex officio		University of Massachusetts Amherst
	Doug Pearson, ex officio		REN-ISAC
	Rodney Petersen		EDUCAUSE
	Marty Ringle		Reed College
	Theresa Rowe		Oakland University
	Brian Voss		Louisiana State University

The Technical Advisory Group (TAG) advises regarding products, services, and methods. Considerations include, but are not limited to: services, information products, information sharing and communication methods, relationships, technical methods to support the trust community and activities, and methods to implement and evaluate services and products.

The TAG is composed of approximately ten members selected by the TAG, and one or more liaisons appointed by REN-ISAC management. The TAG is primarily composed of REN-ISAC members, but may contain individuals not eligible for REN-ISAC membership. Individuals drawn from outside the REN-ISAC membership will be given the privileges of membership during their TAG appointment.

Among its activities, the TAG:

1. performs an annual survey of the REN-ISAC membership to evaluate existing information product and services and to develop recommendations for new or improved products and services;
2. holds an annual birds-of-a-feather meeting in calendar opposition to the survey and in conjunction with a major conference that has strong attendance of research and education security personnel;
3. provides to REN-ISAC written recommendations developed from the survey and BoF inputs, other input gathering, and the combined experience of the TAG members. The reports will critically evaluate existing REN-ISAC products and services; identify and prioritize issues, questions, and opportunities; recommend new or improved services and products; and recommend technical methods, tools, relationships, and analytic techniques to support or improve products and services.

Members of the Technical Advisory Group:

	Chris Misra, chair		University of Massachusetts Amherst
	Daniel Adinolfi		Cornell University
	Phil Deneault		Worcester Polytechnic Institute
	Brian Eckman		University of Minnesota
	Stephen Gill		Team Cymru
	Andrew Korty		Indiana University
	John Kristoff		UltraDNS
	Doug Pearson		REN-ISAC
	Randy Raw		Missouri Research and Education Network
	Michael Sinatra		University of California Berkeley
	Joe St Sauver		University of Oregon
	Gabriel Iovino		REN-ISAC

REN-ISAC and Microsoft cooperate to improve cyber security in the higher-education sector through partnership in the Security Cooperation Program of the Microsoft Security Response Alliance. Under the Program, the organizations share information, of agreed-upon type and scope, with the end goals to provide proactive security information on Microsoft products to the REN-ISAC members, to provide information regarding security experience in higher education to Microsoft, and to maintain a standing relationship prepared for emergency cooperative response.

The Microsoft Analysis Team (MAT), formed of REN-ISAC members possessing specific strengths in Microsoft product security, serves as the information sharing conduit between Microsoft and the REN-ISAC community. The MAT receives, analyzes, and prepares information for sharing, respecting confidentiality requirements of each party. MAT member agreement to the Model Terms for Higher Education Security Response Program Agreement with Microsoft guides confidential information sharing according to goals and activities of the Program.

Information shared under the Program includes, but is not limited to: pre-release information regarding monthly security bulletins, information related to common virus and security issues, in-depth information on publicly disclosed vulnerabilities, monthly bulletin reviews, emergency response coordination, education, and outreach. The MAT provides monthly reports to REN-ISAC members (coinciding with Microsoft Patch Tuesday), and as-needed analysis, guidance, and support when wide-spread Microsoft-related issues arise.

Members of the Microsoft Advisory Team:

	Brian Smith-Sweeney, chair		New York University
	David Greenberg		Indiana Unversity
	Daniel Schwalbe		Unversity of Washington
	Doug Pearson		REN-ISAC
	Gabriel Iovino		REN-ISAC

Copyright, Trustees of Indiana University