Contact us
Our most important task is to provide central support for AU’s local security procedures. If you would like to hear how we can help you, please feel free to contact us.
How can we help?
The information security department works with both IT security and physical security. Some of our tasks include:
- advising on AU’s business in the information security area.
- advising on the establishment of a local Information Security Management System.
- facilitating risk management sessions at AU’s individual units.
- establishing a framework and direction - and making relevant resources available.
- initiating necessary technical and organisational measures.
- informing and raising awareness about information security across AU.
Who are we?
That’s what we’re working on.
We support AU’s security procedures through governance, risk and compliance. Read more about the three concepts.
Governance
- Supports the central organisation of information security at AU, providing administrative support to the Central Information Security Committee (CISU) and participating in the Faculty Information Security Committee (FISU).
- Ensures management support through briefs, management presentations and an annual report.
- Ensures that activities in AU’s Information Security Management System (ISMS) are implemented, communicated and embedded — and that this process is evaluated.
- Advises on projects and case-handling, including requests for support.
Risk management
- Ensures risk management on central IT systems provided by AU.
- Facilitates system classification and risk assessments at AU.
- Follows the risk landscape at AU to identify threats and/or initiate technical and organisational measures.
- Participates in emergency response exercises and the preparation of local emergency response plans.
- Prepares relevant material for risk management, including templates, guides and a threat catalogue.
Compliance
- Communicates relevant AU requirements and key issues to management.
- Is responsible for preparing central frameworks and guidelines for AU’s policies and regulations.
- Implements awareness initiatives, such as educational activities, information campaigns, internal phishing emails, communication across the university, etc.
- Responds to inquiries from and reports to the Ministry of Higher Education and Science and other government agencies and institutions regarding information security.