
Making Use of External Cybersecurity Information at Institutions of Higher Education of All Shapes and Sizes
Gathering and taking action on external cybersecurity information about your organization offers a number of benefits, such as prevention of security incidents, a better understanding of the security posture and exposure, and insights into organizational security practices. This mostly untapped source of relevant and useful information regarding potential compromises and cybersecurity vulnerabilities is available and accessible for institutions of higher education. However, the universities and colleges that would be the consumers of the information truly come in all shapes and sizes. Some come with sizable security teams, but many who need this information do not have enough cybersecurity expertise or awareness to go look for it, let alone gather it and then quickly turn it into something useful in their daily struggle for a safe operating environment. In addition, the IT teams in smaller institutions might not have security-focused people, and if they do, they might not have the financial resources or management support to expand their efforts. So what can be done? In the past year-and-a-half, Arctic Security and EDUCAUSE have conducted research projects to study this topic and document the obstacles and effects of getting this information out to benefit higher education. Our panelists come from institutions both small and large, local and distributed, research and teaching focused. They will share their experiences and insights gathered as they started down on this path.