The Information Security Governance Standing Committee is charged annually by the IT Leadership Team and is empowered to inform strategy and decision rights for all University information security matters. This includes establishing roadmaps, shepherding initiatives, and producing clearly defined decision authority and escalation paths.
If you have questions about this Committee, contact the chair, Ed Carter:
Objectives
- Provide guidance and oversight of University information security and risk management programs
- Review and assure security initiatives effectively meet business objectives
- Manage the risk acceptance process as outlined in University policy 91.006
- Prioritize information security activities across the organization
- Review, and approve information security policies & standards
- Information security metrics review
- Reconcile periodic conflicts

Membership
- Audit Risk & Compliance: Josh Gonzalez, Chief Privacy Officer
- Audit Risk & Compliance: Larry Wines, Director of Enterprise Risk Management & Insurance
- Faculty: Hans Kruse, Instructor; Emeritus (Scripps College)
- Faculty: Brian McCarthy, Professor; Senior Associate Dean (College of Arts & Sciences)
- Faculty: Shawn Ostermann, Associate Professor (College of Engineering)
- Faculty: Bruce Tong, Assistant Professor of Instruction (Scripps College)
- Finance: Julie Allison, Associate Vice President, Finance
- Human Resources: Michael Courtney, Senior Associate General Counsel/Director of Employee & Labor Relations
- Information Technology: Ed Carter (Chair), Chief Information Security Officer and Senior Director, Information Security & Digital Accessibility
- Information Technology: Alicia Porter, Deputy Chief Information Security Officer, and Senior Manager, Information Security & Digital Accessibility
- Regional Higher Education: Larry Tumblin, Director of Information Technology for Regional Higher Education
Meeting Schedule
Meetings will take place on a quarterly basis with additional sessions scheduled as needed to accommodate time-sensitive discussions or to address demand. The three most recent meetings are listed below. Due to the sensitive nature of the items discussed in these meetings, only agendas will be posted to the public.
Date | Time | Agenda |
---|---|---|
02/06/2025
|
2-3:00 p.m. | February 6 agenda |
11/07/2024
|
2-3:00 p.m. | November 11 agenda |
08/01/2024
|
2-3:00 p.m. | August 1 agenda |