State of Cybersecurity in Higher Education

This white paper discusses the current state of cybersecurity in institutions of higher education (IHE). It outlines the increasing challenges that IHE face, including maintaining student satisfaction, compliance regulations, and protecting sensitive data against cyberattacks. The paper presents statistics indicating that IHE were the top targets for cyberattacks in 2021, with a significant increase in incidents compared to previous years. It emphasizes the need for a top-down approach to develop effective cybersecurity strategies and highlights the vulnerabilities of IHE due to insufficient resources and the impact of the COVID-19 pandemic. The document details common attack methods, such as phishing and man-in-the-middle attacks, and stresses the importance of establishing a comprehensive cybersecurity program that involves all stakeholders. Furthermore, it discusses the necessity of complying with evolving regulations and suggests outsourcing some cybersecurity functions to enhance resilience and reduce costs. A high-level roadmap for developing or enhancing cybersecurity programs in IHE is also provided.