Redscan has released a survey into the security issues facing higher education institutions. The survey revealed that more than half of UK universities reported data breaches to the ICO in the last year.
According to the UK's National Cyber Security Centre (NCSC), universities are becoming targets for malicious actors for both financial gain and intellectual property theft. The Redscan report also highlights the concern that educational institutions are not taking adequate measures to protect themselves, especially at a time when many classes are being held remotely due to the coronavirus.
Defending against a relentless stream of phishing remains a challenge for all universities. Several institutions reported receiving millions of malicious emails each year, with one reporting that it reached 130 million. Phishing attempts have been described as “endless” and one university revealed that attacks had increased by 50% since 2019.
Other key findings of the report include:
- 54% of universities reported data breaches to the ICO in the last 12 months
- A quarter of universities have not conducted penetration tests in the last year
- 46% of all university staff in the UK have not received security training in the last year.
- Universities spend an average of £7,529 per year on security training, with costs ranging from £0 to £49,000
- Universities employ, on average, three qualified cybersecurity professionals
- 51% of universities actively provide security education and information to students
- 12% of universities offer no safety guidance, support or training to students
- 66 out of 134 universities have Cyber Essentials or Cyber Essential Plus
Redscan CTO Mark Nicholls commented: “The fact that so many universities are not providing cybersecurity training to their staff and students, nor conducting independent penetration tests is concerning. These are fundamental elements of any security program and key to preventing data breaches.”
"The threat to universities from government attackers makes the need for improvements even more critical. The cost of failing to protect scientific research is enormous."
