2. Zero-Trust Security Principles are Gaining Traction
Establishing a zero-trust security architecture is one of the most effective ways higher education institutions can protect themselves against cyberattacks. While the approach is still catching on in higher education, many institutions already have some zero-trust tools in place.
“Anything that can protect our data from the adversaries and bad actors that are out there, I’m all for it,” McIntosh says. “We’re at the very beginning of that conversation, but zero trust is definitely part of our vernacular, and we’re planning for it.” Establishing zero-trust principles can also help universities comply with cyber insurance requirements, which McIntosh notes are getting stricter.
3. Remote Work Is Here to Stay
The pandemic showed institutions that many higher education jobs can be done remotely, and employees have voiced a preference for flexible work schedules. Many institutions are accommodating these requests, and IT teams need to have policies and procedures in place to ensure all employees comply with access and security measures.
“One of our greatest challenges in accommodating remote work is access to systems,” Andriola says. “You’re now a lot more reliant on your VPN. How do you use dual authentication? The second challenge is keeping these devices up to date on all of their security patches. Do we feel comfortable allowing people to do their own upgrades, or are we going to use technology and push a lot more?”
