Top 5 Cyber Security Challenges Facing Higher Education
The cost of cybercrime is predicted to cost the world $8 trillion / £6.4 trillion in 2023.
With Higher Education institutions falling under one of the most vulnerable categories for cybercriminal targets (with 6 in 10 reporting cyber attacks weekly), universities need to consider their security strategy more than ever to fend off these potential financial consequences.
Here’s why we at Talion believe Higher Education are at higher risk and the unique challenges Higher Education face (in comparison to other industries) which makes it harder for them to fight cybercrime.
Challenge 1: Small Budgets
Since the pandemic, it’s clear that higher institutions are focusing a lot more heavily on the digital estate than the physical, even with in-person classes returning. However, the budget hasn’t necessarily aligned with this. The digital landscape is, in some ways, more expensive – especially in terms of securely protecting a huge, sensitive digital estate that holds valuable student and professor data.
This budget gap has caused numerous problems for institutions, meaning their business continuity now requires a security partner that really understands the sector and can leverage Threat Intelligence with financial effectiveness.
Challenge 2: Meeting Cyber Security Best Practices When Moving Across Institutions
Universities are surrounded by an open and collaborative environment, and this positively affects their cross-institutional work. However, from a cyber security standpoint, it leaves huge risk of data vulnerability. Cyber security best practices, whilst sensible and easy to follow at times, can be easily overlooked in importance. This slacking in compliance means that, as colleagues travel in and out of other institutions, there is no awareness of where their data is and who can access it. This “head in the sand” approach can prove difficult for CISOs to change.
Challenge 3: Protecting Highly Sensitive Data
Universities are known for storing vast amounts of Personal Identifiable Data (PID), especially as students move in and out of the system annually. From salaries and bank details, to addresses and pastoral care notes, there is endless data that’s considered attractive to a cybercriminal. There is even commercially valuable intellectual property, such as the Oxford Astra Zeneca Vaccine, as universities drive research projects. As a result, Higher Education institutions remain high targets and must stay aware of ever-changing trends in the cybersecurity landscape to make relevant amendments to their security posture.
Challenge 4: Employee Conformity
Although CISOs may try hard to put new security regulations and best practices in place, these aren’t necessarily adopted by colleagues – or at least not with much willingness. Academics like their familiar systems and processes, even if they may be outdated, and this makes it particularly difficult for institutions to make changes widespread.
Challenge 5: Lack Of Communication Outside Of Higher Education
Although university CISOs are very willing to collaborate and share insight with colleagues at other universities, this can hinder them in the long run as they focus more on their peers than seeking external support. Whilst internal advice can be helpful, further knowledge and expertise can be gained by considering solutions such as Threat Intelligence, which draws upon in-depth research of cybercriminal tactics, techniques and procedures (TTPs) to produce actionable recommendations – ones which many universities are currently lacking.
As a CISO at a university, you may resonate with some or all of these challenges within your institution. Yes, these challenges are present, but that doesn’t mean security improvements are unachievable; it’s about working past these issues to show your colleagues the value in adopting best practices and safeguarding sensitive data.
To first understand what specific threats Higher Education are facing, listen to our special edition Threat Set Radio podcast episode.
For a more in-depth analysis of sector-specific threats, recent attacks on Higher Education and actionable recommendations, download your Cyber Threat Report here.
Any further questions?
