---
title: U.S. Colleges Fall Short In Cybersecurity
description: American universities face huge cybersecurity challenges. Schools must take critical steps to get up to speed to improve higher education network security.
image: https://www.resilientiq.com/hubfs/Blog_Images/U.S.-Colleges-Fall-Short-In-Cybersecurity.jpg
---

[![NEW_ResilientLogoShadow_FINALwhite.png](https://www.resilientiq.com/hs-fs/hubfs/Resilient_Logos/NEW_ResilientLogoShadow_FINALwhite.png?width=1210&height=254&name=NEW_ResilientLogoShadow_FINALwhite.png "NEW_ResilientLogoShadow_FINALwhite.png")](http://resilientiq.com)

![Resilient-Advanced-Network-Solutions 4.jpg](https://www.resilientiq.com/hs-fs/hubfs/Blog_Images/Resilient-Advanced-Network-Solutions%204.jpg?width=1920&name=Resilient-Advanced-Network-Solutions%204.jpg "Resilient-Advanced-Network-Solutions 4.jpg")

# Networking Intelligence

September 28, 2016

# U.S. Colleges Fall Short In Cybersecurity

![authorIcon](http://www.sparkreaction.com/hubfs/Oceania%20Theme%202016/Images/authorIcon.png) By [Erin Brady](https://www.resilientiq.com/blog/author/erin-brady) ![topicIcon](http://www.sparkreaction.com/hubfs/Oceania%20Theme%202016/Images/topicIcon.png) [IT Security in Education](https://www.resilientiq.com/blog/topic/it-security-in-education), [network security in higher education](https://www.resilientiq.com/blog/topic/network-security-in-higher-education)

[![U.S.-Colleges-Fall-Short-In-Cybersecurity.jpg](https://www.resilientiq.com/hubfs/Blog_Images/U.S.-Colleges-Fall-Short-In-Cybersecurity.jpg) ](https://www.resilientiq.com/blog/u.s.-colleges-fall-short-in-cybersecurity)

Data breaches don’t just hit big box stores like Target and Home Depot. Increasingly, colleges and universities are attacked by cyber threats, putting potentially millions of students and administrators at risk.

![U.S.-Colleges-Fall-Short-In-Cybersecurity.jpg](https://www.resilientiq.com/hs-fs/hubfs/Blog_Images/U.S.-Colleges-Fall-Short-In-Cybersecurity.jpg?width=640&name=U.S.-Colleges-Fall-Short-In-Cybersecurity.jpg)

According to Verizon’s [2016 Data Breach Investigations Report](http://smtp.butterflypublisher.com/wf/click?upn=17cdA7JIZWFP6os4Brw4fGnjak4MgPyZhXKex3T7p7rQ9l3x2l9-2B-2FV1TIAh954cI3naiu4pKFUfciYjYu8I7K-2BP4Gt6rRj9utrQAYhKAcS0-3D_8Y31rGevScHmSBeObdysNfNVA8hAL6mG0q6Bznsz6VrZEsaNYbB4Tq25b73SpqQdlanXGkeQyb1ddAZXcVLQ9ByYqtWN-2BfMMPM1grYuwbji5D7QgX-2BoES9f1-2BSSjdgEgisUQe-2F3F7bxa4-2BntPLNI-2FFv-2FJRq49OkLiyeCS9IwxCBo9JhKzUuK5qIRLBmUbohHuj8wdpozHP2QSdlN5tZTzESzbBqB6fKLbennOmtj-2F3MC92k5csJxLcBiuxbnl2JXPIOlD6yzSOQgrZ6J7llOEiLw-2BQVYl0FzWz0uPxOfXNQ-3D), the education sector ranked sixth overall in the country for the total number of reported “security incidents” last year.

American universities face huge cybersecurity challenges. Schools must take critical steps to get up to speed.

## Schools = data. And hackers love data.

One source cited by the [Huffington Post](http://smtp.butterflypublisher.com/wf/click?upn=17cdA7JIZWFP6os4Brw4fAt5fTX5ahvgIDJtk64pLZYgYezfhWYbLqALL5r-2FF0GiZ2D8UARy3VfYbX-2FiL3WwccUzXKm9jTIEn6nZpiMpItUCuLwz9X-2FgHInwKU6VB8WK1Xw9mTk6ycQsDNjkZD5UW95AmcCUuse-2BMiE8Odscafw-3D_8Y31rGevScHmSBeObdysNfNVA8hAL6mG0q6Bznsz6VrZEsaNYbB4Tq25b73SpqQdlanXGkeQyb1ddAZXcVLQ9ByYqtWN-2BfMMPM1grYuwbji5D7QgX-2BoES9f1-2BSSjdgEgBEN6yJfkL0woUy-2BOUxlOy0WbBV-2B9PFH-2FPq7ordg4hJrO4XE8KkjgxUWRJ0CkND-2BFBVDZaGAd7dUdAPf-2FG-2FtJeW50daE-2Bcd-2Bymi8U-2BVkFOhHEJb8NteLO-2FWWrgyKSPJnJysD3qTPIXvIBsNexVSIcAixl8KNE3bZziVwX1zBPKc8-3D) described the education sector, particularly at the college and university level, as a “virtual buffet of valuable data.”

Schools have what hackers want and in massive volumes. Think personal information like Social Security numbers, birth dates, financial profiles, medical records — not to mention innovative research in science and engineering.

The breadth of data makes them attractive to a wide range of cyber thieves — from organized crime to state-backed hackers and even hacktivists.

## Hackers love the sick spots.

School health facilities are a top target since medical records equal mega cash on the dark web. According to [CNBC](http://smtp.butterflypublisher.com/wf/click?upn=17cdA7JIZWFP6os4Brw4fLpFInJp9pFv-2Bwgx-2BGFbiEYXdUvxaic9kmr1Na5rJ-2B6v8hoGLB2vVBbIs1TST6XCBytI4Zreka4Wl07oNxsH5vFLr1VY2sLosm-2Bacqi-2F2ePP_8Y31rGevScHmSBeObdysNfNVA8hAL6mG0q6Bznsz6VrZEsaNYbB4Tq25b73SpqQdlanXGkeQyb1ddAZXcVLQ9ByYqtWN-2BfMMPM1grYuwbji5D7QgX-2BoES9f1-2BSSjdgEg6eaMPpbSp3BCu8WjYiYUnHUvVQPmADUDXMkeLpMW8AU3CzmRlAhkMPuntbQ-2FYT1YqYPpR6eIu5BKi1ci7-2FVChgcnN75KRsPSDqBRVO1wv1nkFdArWC8JeFSVH-2F4fNDXytyT9GQCwpjbjwnAbyqggeepRZ78DeMRCnBnpfABvl0s-3D), the value of these records is worth up to 60 percent more than swiped credit card numbers. Healthcare breaches are just too tempting for thieves.

## Finding cybersecurity dollars isn’t easy.  

Schools have an uphill (but not insurmountable) climb against cybersecurity. One of the most pressing issues is budgets. Jumpstarting a modern cybersecurity program is pricey — not just to get it set up, but also to maintain it. As a point of reference, [Rutgers University](http://smtp.butterflypublisher.com/wf/click?upn=FaWo-2FcJ1L9O9jAtMGQEmMO5Pp3tgn4S-2FEwafwEJflB8uutOI-2FcB3VBBGkxJ42DqyObKfabH2jT0BIHou5d-2Bz1etwffI1he4T7p-2FUnwmzLG-2FERJgknEg2L8tf-2Fi0iKdxF_8Y31rGevScHmSBeObdysNfNVA8hAL6mG0q6Bznsz6VrZEsaNYbB4Tq25b73SpqQdlanXGkeQyb1ddAZXcVLQ9ByYqtWN-2BfMMPM1grYuwbji5D7QgX-2BoES9f1-2BSSjdgEgmsaJFiO5B19Alo7eKg5fqZs6-2FeDHlF-2B7jNi8eOnGwEefIWClwAy-2BgLDYiDj5Y9zwlN1fgchZc3CBvVOAqiLeeyW5iBiPZeCg5YT9y0kEHayydN35vBl3pY1KqF53fmxHtoV3QHwV-2FkRViiLwx17TCGpYDPEetIHKHWUWZFzyyYw-3D) spent between $2-3 million in one year.

With budgets already tight, finding the dollars to support university cybersecurity improvements isn’t easy. Raising fees, taxes or tuition rates are rarely popular options.

## Big schools mean big security woes.

Hackers target colleges and universities because of the sheer volume of data they can potentially steal. University networks are large and sprawling and house many varieties of sensitive data. Eliminating weak points in the network is not an easy undertaking, especially for an IT department without sufficient training in cybersecurity.

Colleges are also extremely accessible, which can be problematic when it comes to security. The networks and data need to be able to be accessed by a number of people — from students to instructors and administrators. So while this accessibility is key to keeping a school running smoothly, it makes it easier for thieves to steal data.

**[Also read: Are You Cramming To Create A Cyber Secure Campus? >>](https://www.resilientiq.com/blog/are-you-cramming-to-create-a-cyber-secure-campus)**

What can be done to protect colleges and schools in general? According to [EdSurge](http://smtp.butterflypublisher.com/wf/click?upn=Dy5QRQHRVT-2FMkPWsBY-2BQaswjcvUNWAPrLgjR8B3gwexJnHIOenbH-2FT3xNqck7xX0aq5TnwFwH6xaI-2B2-2BZetnW8ZxQ2yH9JnL63iUKlNtixn0p2qKclZ3NKAiMZXvXrGNZnebMmJ902LDPiujQ3Tl2g-3D-3D_8Y31rGevScHmSBeObdysNfNVA8hAL6mG0q6Bznsz6VrZEsaNYbB4Tq25b73SpqQdlanXGkeQyb1ddAZXcVLQ9ByYqtWN-2BfMMPM1grYuwbji5D7QgX-2BoES9f1-2BSSjdgEgS2kD8Xx-2B56kgI-2BXvG16a0yxGgFFWlM34JR-2BF1k-2FG4IgvJ2sVrfOukGYuiJNGOMhlQEzTWCoVZBAFcyhU9qsI6wTGjkN1CXaNwNsBS-2Ba06UeSI3u6Whc-2Bgsh-2FLa3-2FlLLsHNUD3OViaA9QaIdZ454ZYOHYDaW3srcE7Y4aSuYXDcE-3D), there are three critical steps:

## Secure everything.

We are tethered — albeit wirelessly — to our mobile devices. But it’s imperative schools don’t give hackers unfettered access to data by not securing every smartphone, tablet and PC.

## Encrypt everything.

By encrypting data, you keep it from ending up in the wrong hands. While many educational facilities have strong firewalls, not many take the next steps to protect data at rest. Every bit of data housed on a disk should be encrypted.

## Educate everyone.

Experts also suggest educating staff and students about cyber crime — what is is, how criminals steal data, and what it means for all of us in this ever-increasingly digital world.

A partner of Fortinet, [ResilientIQ](http://smtp.butterflypublisher.com/wf/click?upn=17cdA7JIZWFP6os4Brw4fE345ZLiSKg4jjXQF7tzEOxkkKavjRR1tLzgkakIjxV-2F_8Y31rGevScHmSBeObdysNfNVA8hAL6mG0q6Bznsz6VrZEsaNYbB4Tq25b73SpqQdlanXGkeQyb1ddAZXcVLQ9ByYqtWN-2BfMMPM1grYuwbji5D7QgX-2BoES9f1-2BSSjdgEg8qSKqGWPCeIOHHow3H0uBvTWh2XrTdU09msheRG9pWSUpAFp7R5GOpf9xydZdGEN2r8fKHDpraZYqru4NBlZVZ-2B9DcyrRBrGGIhN4rmXCcRNnMVO-2BO1ODS6dUPwxbEiHMXkwdDvcyn-2F71ZYVcVJ5nn9fAtfCiXx0VdI-2FHhfLdhA-3D) offers the services, technology and higher education network security experience to put your cybersecurity on course.

 

 SHARE THIS STORY [**](https://www.facebook.com/sharer/sharer.php?u=https://www.resilientiq.com/blog/u.s.-colleges-fall-short-in-cybersecurity&title=U.S.%20Colleges%20Fall%20Short%20In%20Cybersecurity&picture=http://cdn2.hubspot.net/hubfs/703198/Blog_Images/U.S.-Colleges-Fall-Short-In-Cybersecurity.jpg&description=American%20universities%20face%20huge%20cybersecurity%20challenges.%20Schools%20must%20take%20critical%20steps%20to%20get%20up%20to%20speed%20to%20improve%20higher%20education%20network%20security.) | [**](https://twitter.com/intent/tweet?source=https://www.resilientiq.com/blog/u.s.-colleges-fall-short-in-cybersecurity&text=U.S.%20Colleges%20Fall%20Short%20In%20Cybersecurity) | [**](http://www.linkedin.com/shareArticle?mini=true&url=https://www.resilientiq.com/blog/u.s.-colleges-fall-short-in-cybersecurity&title=U.S.%20Colleges%20Fall%20Short%20In%20Cybersecurity&summary=American%20universities%20face%20huge%20cybersecurity%20challenges.%20Schools%20must%20take%20critical%20steps%20to%20get%20up%20to%20speed%20to%20improve%20higher%20education%20network%20security.)

[NEXT POST **](https://www.resilientiq.com/blog/6-point-checklist-for-cybersecurity-awareness-month)

### Search



### Recent Posts

### Posts by Topic

- [network security (29)](https://www.resilientiq.com/blog/topic/network-security)
- [employee it policy (15)](https://www.resilientiq.com/blog/topic/employee-it-policy)
- [security fabric (13)](https://www.resilientiq.com/blog/topic/security-fabric)
- [ransomware (11)](https://www.resilientiq.com/blog/topic/ransomware)
- [acceptable use policy (8)](https://www.resilientiq.com/blog/topic/acceptable-use-policy)
- [cyber threat analysis (7)](https://www.resilientiq.com/blog/topic/cyber-threat-analysis)
- [IT Security in Education (6)](https://www.resilientiq.com/blog/topic/it-security-in-education)
- [malware (6)](https://www.resilientiq.com/blog/topic/malware)
- [IoT Security (5)](https://www.resilientiq.com/blog/topic/iot-security)
- [Patient data security (5)](https://www.resilientiq.com/blog/topic/patient-data-security)
- [Protecting Student Data (5)](https://www.resilientiq.com/blog/topic/protecting-student-data)
- [network vulnerability (5)](https://www.resilientiq.com/blog/topic/network-vulnerability)
- [wireless networking solutions (5)](https://www.resilientiq.com/blog/topic/wireless-networking-solutions)
- [Cyber Threat Assessment (4)](https://www.resilientiq.com/blog/topic/cyber-threat-assessment)
- [Digital Privacy in Schools (4)](https://www.resilientiq.com/blog/topic/digital-privacy-in-schools)
- [protecting your it network (4)](https://www.resilientiq.com/blog/topic/protecting-your-it-network)
- [DDoS Attacks (3)](https://www.resilientiq.com/blog/topic/ddos-attacks)
- [IT Security in Schools (3)](https://www.resilientiq.com/blog/topic/it-security-in-schools)
- [Protecting Employee Privacy (3)](https://www.resilientiq.com/blog/topic/protecting-employee-privacy)
- [advanced persistent threats (3)](https://www.resilientiq.com/blog/topic/advanced-persistent-threats)
- [cloud security (3)](https://www.resilientiq.com/blog/topic/cloud-security)
- [healthcare cyberattacks (3)](https://www.resilientiq.com/blog/topic/healthcare-cyberattacks)
- [network threats (3)](https://www.resilientiq.com/blog/topic/network-threats)
- [phishing (3)](https://www.resilientiq.com/blog/topic/phishing)
- [secured network services (3)](https://www.resilientiq.com/blog/topic/secured-network-services)
- [securing the healthcare enterprise (3)](https://www.resilientiq.com/blog/topic/securing-the-healthcare-enterprise)
- [traffic shaping (3)](https://www.resilientiq.com/blog/topic/traffic-shaping)
- [Control network traffic (2)](https://www.resilientiq.com/blog/topic/control-network-traffic)
- [Intent-based Security (2)](https://www.resilientiq.com/blog/topic/intent-based-security)
- [K-12 Technology Security (2)](https://www.resilientiq.com/blog/topic/k-12-technology-security)
- [app performance (2)](https://www.resilientiq.com/blog/topic/app-performance)
- [bandwidth management (2)](https://www.resilientiq.com/blog/topic/bandwidth-management)
- [byod policy (2)](https://www.resilientiq.com/blog/topic/byod-policy)
- [cloud (2)](https://www.resilientiq.com/blog/topic/cloud)
- [critical infrastructure threats (2)](https://www.resilientiq.com/blog/topic/critical-infrastructure-threats)
- [cyber secure campus (2)](https://www.resilientiq.com/blog/topic/cyber-secure-campus)
- [cybersecurity strategy (2)](https://www.resilientiq.com/blog/topic/cybersecurity-strategy)
- [mobile device security (2)](https://www.resilientiq.com/blog/topic/mobile-device-security)
- [network optimization (2)](https://www.resilientiq.com/blog/topic/network-optimization)
- [network security in higher education (2)](https://www.resilientiq.com/blog/topic/network-security-in-higher-education)
- [network technology (2)](https://www.resilientiq.com/blog/topic/network-technology)
- [network visibility (2)](https://www.resilientiq.com/blog/topic/network-visibility)
- [oil and gas industry (2)](https://www.resilientiq.com/blog/topic/oil-and-gas-industry)
- [ssl encryption (2)](https://www.resilientiq.com/blog/topic/ssl-encryption)
- [threat intelligence (2)](https://www.resilientiq.com/blog/topic/threat-intelligence)
- [unified threat management (UTM) (2)](https://www.resilientiq.com/blog/topic/unified-threat-management-utm)
- [wan optimization (2)](https://www.resilientiq.com/blog/topic/wan-optimization)
- [wireless LAN access security (2)](https://www.resilientiq.com/blog/topic/wireless-lan-access-security)
- [wireless network best practices (2)](https://www.resilientiq.com/blog/topic/wireless-network-best-practices)
- [802.11ac wave 2 (1)](https://www.resilientiq.com/blog/topic/802-11ac-wave-2)
- [Endpoint Protection (1)](https://www.resilientiq.com/blog/topic/endpoint-protection)
- [Endpoint Security (1)](https://www.resilientiq.com/blog/topic/endpoint-security)
- [IT Security in Government (1)](https://www.resilientiq.com/blog/topic/it-security-in-government)
- [Internal Segmentation Firewalls (1)](https://www.resilientiq.com/blog/topic/internal-segmentation-firewalls)
- [Network Technology Problem Solving (1)](https://www.resilientiq.com/blog/topic/network-technology-problem-solving)
- [Point of sale attacks (1)](https://www.resilientiq.com/blog/topic/point-of-sale-attacks)
- [Public sector IT networks (1)](https://www.resilientiq.com/blog/topic/public-sector-it-networks)
- [Software-defined networking (1)](https://www.resilientiq.com/blog/topic/software-defined-networking)
- [Threat detection (1)](https://www.resilientiq.com/blog/topic/threat-detection)
- [application security (1)](https://www.resilientiq.com/blog/topic/application-security)
- [business critical applications (1)](https://www.resilientiq.com/blog/topic/business-critical-applications)
- [critical learning applications (1)](https://www.resilientiq.com/blog/topic/critical-learning-applications)
- [cybersecurity (1)](https://www.resilientiq.com/blog/topic/cybersecurity)
- [cybersecurity technology (1)](https://www.resilientiq.com/blog/topic/cybersecurity-technology)
- [data protection (1)](https://www.resilientiq.com/blog/topic/data-protection)
- [digital learning (1)](https://www.resilientiq.com/blog/topic/digital-learning)
- [healthcare data security (1)](https://www.resilientiq.com/blog/topic/healthcare-data-security)
- [healthcare mobile networks (1)](https://www.resilientiq.com/blog/topic/healthcare-mobile-networks)
- [high performance network security (1)](https://www.resilientiq.com/blog/topic/high-performance-network-security)
- [higher education (1)](https://www.resilientiq.com/blog/topic/higher-education)
- [hybrid clouds (1)](https://www.resilientiq.com/blog/topic/hybrid-clouds)
- [hyperconnected (1)](https://www.resilientiq.com/blog/topic/hyperconnected)
- [indicators of compromise (1)](https://www.resilientiq.com/blog/topic/indicators-of-compromise)
- [it industry news (1)](https://www.resilientiq.com/blog/topic/it-industry-news)
- [network infrastructure (1)](https://www.resilientiq.com/blog/topic/network-infrastructure)
- [network intrusion (1)](https://www.resilientiq.com/blog/topic/network-intrusion)
- [networking terminology (1)](https://www.resilientiq.com/blog/topic/networking-terminology)
- [next-generation firewal (1)](https://www.resilientiq.com/blog/topic/next-generation-firewal)
- [ngfw (1)](https://www.resilientiq.com/blog/topic/ngfw)
- [reinforce network technology (1)](https://www.resilientiq.com/blog/topic/reinforce-network-technology)
- [retail data security (1)](https://www.resilientiq.com/blog/topic/retail-data-security)
- [sandbox solution (1)](https://www.resilientiq.com/blog/topic/sandbox-solution)
- [sdn (1)](https://www.resilientiq.com/blog/topic/sdn)
- [security operations (1)](https://www.resilientiq.com/blog/topic/security-operations)
- [shadow IT risks (1)](https://www.resilientiq.com/blog/topic/shadow-it-risks)
- [ssl inspection (1)](https://www.resilientiq.com/blog/topic/ssl-inspection)
- [ssl security (1)](https://www.resilientiq.com/blog/topic/ssl-security)
- [university campus cybersecurity (1)](https://www.resilientiq.com/blog/topic/university-campus-cybersecurity)
- [zero-day attacks (1)](https://www.resilientiq.com/blog/topic/zero-day-attacks)

[see all](https://www.resilientiq.com/blog/u.s.-colleges-fall-short-in-cybersecurity#)

### Subscribe to Blog

[![Resilient-Advanced-Networking-Solutions.png](https://www.resilientiq.com/hs-fs/hubfs/Resilient_Logos/Resilient-Advanced-Networking-Solutions.png?width=496&height=105&name=Resilient-Advanced-Networking-Solutions.png "Resilient-Advanced-Networking-Solutions.png")](http://resilientiq.com)

Contact

 2921 Country Club Road  
 Denton, Texas 76210  
 940-535-7500

#### Keep in Touch

### Subscribe to Our Blog

## [![social-1834007_960_720](https://www.resilientiq.com/hs-fs/hubfs/Social%20Media%20Icons/social-1834007_960_720.png?width=40&name=social-1834007_960_720.png "social-1834007_960_720")](https://www.facebook.com/ResilientIntelligentNetworks)[![social-1834011_1280](https://www.resilientiq.com/hs-fs/hubfs/Social%20Media%20Icons/social-1834011_1280.png?width=40&name=social-1834011_1280.png "social-1834011_1280")](https://www.linkedin.com/company/resilient-intelligent-networks)[![social-1834013_1280](https://www.resilientiq.com/hs-fs/hubfs/Social%20Media%20Icons/social-1834013_1280.png?width=40&name=social-1834013_1280.png "social-1834013_1280")](https://twitter.com/resilientiq)[![social-1834014_960_720](https://www.resilientiq.com/hs-fs/hubfs/Social%20Media%20Icons/social-1834014_960_720.png?width=40&name=social-1834014_960_720.png "social-1834014_960_720")](https://www.resilientiq.com/blog/rss.xml)[![](https://www.resilientiq.com/hs-fs/hubfs/Social%20Media%20Icons/social-1834016_960_720.png?width=40&name=social-1834016_960_720.png "social-1834016_960_720.png")](https://www.youtube.com/channel/UCIuShF1pL6Ekv2JTOnXuz-Q)

Search the Resilient Blog on Google