Risk, Ethics, and Uncertainty: Rethinking Cybersecurity Governance in Higher Education

Tuesday, May 20, 2025 | 9:00AM–9:45AM ET | Harborside Ballroom E, 4th Floor
Session Type: Breakout Session
Delivery Format: Facilitated Discussion
Higher Education Institutions (HEIs) play a unique role in fostering trust with their communities, students, and alumni. Increasingly, HEIs often look to adopt corporate-influenced, quantifiable risk metrics to guide privacy and cybersecurity decision-making, often framing risk within predefined thresholds of acceptable loss. This raises critical questions about the ethics, role, and effectiveness of risk quantification in HEI cybersecurity and privacy strategies. This session will explore the governance of cybersecurity risk in HEIs through both qualitative and quantitative methods. Participants will have the opportunity to share risk governance strategies from their institutions, discuss challenges in balancing ethical considerations with data-driven decision-making, and learn from peers facing similar issues. The discussion aims to foster a collaborative exchange of best practices, frameworks, and lessons learned to improve cybersecurity and privacy governance in academic settings.

Presenters

  • Ali Abdel-Fattah

    Information Security Specialist, Sr., Arizona State University

  • Keith Swanson

    Manager of Cyber Risk, Arizona State University

Resources & Downloads

  • Risk Ethics and Uncertainty Rethinking Cybersecurity Governance in Higher Education

    Updated on 5/17/2025