Results for July HEISC Survey on Current Risks & Top Issues

[Valerie Vogel <vvogel () EDUCAUSE EDU>]

Good afternoon,

Thank you for responding to our most recent quarterly HEISC survey on current risks and top issues in the higher 
education community.

The top 5 issues for Q3 (with 57 respondents):

1.       Phishing and social engineering

2.       Limited resources for the security program (too much work, not enough time or people)

3.       Addressing regulatory requirements (PCI, NIST 800-171, etc.)

4.       Malware, ransomware, APTs, and zero day vulnerabilities

5.       End user awareness, training, and education


And as a reminder, here are the top 5 issues for the first two quarters in 2017.

Top 5 issues for Q2 (with 101 respondents):

1.       Phishing and social engineering

2.       Limited resources for the security program (too much work, not enough time or people)

3.       End user awareness, training, and education

4.       Limited funding for the security program

5.       Protecting Personally Identifiable Information (reducing end-user storage and access to PII)

Top 5 issues for Q1 (with 114 respondents)

1.       Phishing and social engineering

2.       Limited resources for the security program (too much work, not enough time or people)

3.       End user awareness, training, and education

4.       Limited funding for the security program

5.       Malware, ransomware, APTs, and zero day vulnerabilities


Thank you,
Valerie


Valerie Vogel
Senior Manager, Cybersecurity Program

EDUCAUSE
Uncommon Thinking for the Common Good
direct: 202.331.5374 | twitter: @HEISCouncil | vvogel () educause edu<mailto:vvogel () educause edu>

Become a Member- Everyone at your organization is an EDUCAUSE member when you join | Access discounts, resources, and 
valuable peer networks | Discover membership<https://www.educause.edu/about/discover-membership>

Attend the EDUCAUSE Metrics 
Mania!<https://events.educause.edu/webinar/2017/metrics-mania-using-metrics-to-bolster-your-higher-education-information-security-program>
 online seminar, August 9, 2017.