Most Ed Institutions Unprepared for Data Risks

Nearly four in five, 77 percent, of education institutions are unprepared for IT risks, according to a new survey from Netwrix.

Respondents told researchers that employees are the biggest threat to system availability and security at the same rate, 77 percent and 79 percent said that they do not use any software for information security or risk management.

Other key findings of the survey include:

  • 72 percent of responding institutions reported that they don't have a dedicated employee responsible for IT security;
  • 49 percent of responding institutions said they had experienced security incidents as a result of human behavior, and 37 percent reported incidents resulting from malware;
  • Lack of budget was the most frequently cited reason for not taking a more efficient approach to security, at 74 percent, while lack of time and insufficient participation from senior management were cited by 54 percent and 44 percent of respondents, respectively;
  • The most protected areas, according to respondents, were endpoint (82 percent), on-premises systems (79 percent) and virtual infrastructure (73 percent);
  • The most neglected areas were BYOD (49 percent), unstructured data stored by a third party (33 percent) and employee activity (17 percent);
  • 54 percent of respondents said that downtime was the result of accidental or incorrect user activity;
  • More than a third, 35 percent, of respondents said they had compliance issues in 2016; and
  • Prevention of data breaches and fraud were the most commonly cited focus of future investments, at 49 percent each, followed by intellectual property theft, at 23 percent.

"Typically, IT departments in the educational sector are understaffed and under-budgeted," said Michael Fimin, CEO and co-founder of Netwrix, in a prepared statement. "Nevertheless, they have to support hundreds of users and meet tightening requirements for data protection. To successfully secure sensitive data and maximize system uptime, educational institutions need to gain visibility into user activity across the entire IT infrastructure. Knowing who does what in which system, who has which permissions, who accesses what files and so on will cost-efficiently facilitate security, compliance and operational tasks, as well as simplify dealing with IT incidents."

For more information, visit blog.netwrix.com.

About the Author

Joshua Bolkan is contributing editor for Campus Technology, THE Journal and STEAM Universe. He can be reached at [email protected].

Featured

  • abstract geometric pattern of glowing interconnected triangles, hexagons, and circles in blue, gold, and white, spread across a dark navy-to-black gradient background

    OpenAI Introduces 'Operator' AI for Performing Web Tasks

    OpenAI has announced "Operator," an AI agent designed to perform web-based tasks autonomously using its own browser. Currently available as a research preview for Pro users in the United States, the tool aims to automate everyday activities such as filling out forms, ordering groceries, and even creating memes.

  • A geometric pattern of open Chromebook computers with bold outlines, subtle shading, and soft gradients, spaced evenly with vibrant green and blue accents on a neutral background.

    Challenges and Opportunities Ahead for the 'Great Chromebook Refresh'

    During the pandemic, the education community scrambled to provide students with laptops to promote online learning equity and mitigate learning loss. Today, those devices are approaching the end of their useful lives — and a "great Chromebook refresh" has been predicted as schools seek to replace them with newer models.  

  • file folders floating in the clouds, with glowing AI circuitry and data lines intertwined

    OneDrive Update Adds Copilot AI Tech

    Microsoft has announced new enterprise capabilities in its OneDrive cloud storage service, many of which leverage the company's Copilot AI capabilities.

  • outline of a modern school building as glowing blue geometric shapes, surrounded by binary code streams, with golden orbs and lines representing funding, set against a dark gray gradient with faint grid patterns

    FCC Cybersecurity Pilot Participants Selected

    The Federal Communications Commission has officially selected the participants for its Schools and Libraries Cybersecurity Pilot, the three-year program exploring the use of Universal Service funds to improve school and library defenses against cyber attacks.