The Preparedness Paradox: Closing the Cybersecurity Strategy Execution Gap in Higher Ed

Institutions are doing more than ever to protect their networks: budgets are up, vulnerability assessments are more frequent, and MFA adoption is growing. So why does real security feel further away? Action1's Cybersecurity in Education Report 2025–2026, based on a survey of 350+ education IT leaders worldwide, reveals a troubling disconnect: confidence in being "highly prepared" dropped from 30% to 18% year-over-year, even as investment increased. The gap isn't awareness—it's execution. This poster session unpacks the strategy-to-execution gap facing higher education IT teams today: why proactive cybersecurity practices fail to scale in real-world, resource-constrained environments. Drawing on original research, Field CTO Gene Moody will walk through areas where vulnerability and patch management programs are falling short, describe operational barriers driving the gap, and discuss approaches that demonstrably improve outcomes, even under tight staffing and budget constraints. If your institution is putting in the effort but still not feeling confident, this session will help you understand why, and what to do differently.