Report: Registrars and Enrollment Leaders Need a Heavier Hand in IT Security

Glowing icons representing people in a network

Because registrars and enrollment managers make decisions daily that affect securing data, both roles should be "key members" of the cybersecurity team. According to a new paper on information security in higher education, those individuals should meet regularly with the CIO and chief information security officer to weigh in on incident response plans, risk management and training programs. When they're holding staff meetings, information security needs to be a standing agenda item. And they should be involved in taking inventory of the data and who has access to it.

"Why Cybersecurity Matters" was produced by the National Student Clearinghouse, Educause and the Research and Education Networking Information Sharing and Analysis Center (REN-ISAC).

According to the report, at least some of the responsibility for responding to a data breach will rest with the registrar's office and the office of enrollment management. For that reason, the leaders of those units need to understand how breaches could happen, how student data is being secured and what challenges the IT office faces in securing data.

Also, because they interact with third-party companies that are working with student data and institutional systems, they need to be prepared to ask hard questions of those vendors about cybersecurity practices, among them:

  • Does the organization use multifactor authentication?
  • Does the organization have an incident response plan defined?
  • When and how will notification be done when a breach occurs?

The paper offers an action list of recommended actions for these roles, including:

  • Pinpointing the risks and sorting out with IT which organization is responsible for what security steps;
  • Making sure that endpoints are automatically updated;
  • Implementing multifactor authentication; and
  • Knowing everyone who has access to the data, how and why.

The 12-page report is openly available on the Student Clearinghouse website.

About the Author

Dian Schaffhauser is a former senior contributing editor for 1105 Media's education publications THE Journal, Campus Technology and Spaces4Learning.

Featured

  • abstract pattern with interconnected blue nodes and lines forming neural network shapes, overlaid with semi-transparent bars and circular data points

    Data, AI Lead Educause Top 10 List for 2025

    Educause recently released its annual Top 10 list of the most important technology issues facing colleges and universities in the coming year, with a familiar trio leading the bunch: data, analytics, and AI. But the report presents these critical technologies through a new lens: restoring trust in higher education.

  • digital brain made of blue circuitry on the left and a shield with a glowing lock on the right, set against a dark background with fading binary code

    AI Dominates Key Technologies and Practices in Cybersecurity and Privacy

    AI governance, AI-enabled workforce expansion, and AI-supported cybersecurity training are three of the six key technologies and practices anticipated to have a significant impact on the future of cybersecurity and privacy in higher education, according to the latest Cybersecurity and Privacy edition of the Educause Horizon Report.

  • Campus Technology Product Award

    Call for Entries: 2024 Campus Technology Product Awards

    The entry period for the 2024 Campus Technology Product Awards is now open.

  • open laptop with screen depicting a glowing, holographic figure surrounded by floating symbols of knowledge like books, equations, and lightbulbs

    Cengage Intros Gen AI Student Assistant Beta

    Ed tech company Cengage has announced the beta launch of Student Assistant, a generative AI tool designed to guide students through the learning process with personalized resources and feedback.