Musa Masungwini | Data Protector & Cyber Defender | Dell Technologies South Africa | mail me |
Higher education institutions face cybersecurity challenges that differ from those in many other sectors. These challenges shape how universities approach tackling cyber threats in complex environments.
The major risks facing South African universities include ransomware, phishing, data breaches and insider threats. Institutions also depend heavily on third parties and face a significant cybersecurity skills gap. These risks intensify because of the shift to digital learning and persistent budget constraints. As a result, universities need stronger policies, better awareness and sustained investment when tackling cyber threats.
How can institutions remain secure?
In South Africa and across the globe, universities rely on open networks designed to support collaboration. At the same time, student populations constantly change, and budgets remain constrained.
Together, these factors expand the opportunity for cyberattacks and complicate efforts at tackling cyber threats. Moreover, institutions house research data, personally identifiable information, financial records and intellectual property. These assets make universities attractive targets for cybercriminals.
In some respects, the problem is cultural. Academic institutions value openness, shared governance and intellectual freedom. However, strict security access controls, monitoring and response protocols common in corporate environments may not translate easily to universities. This tension raises an important question: how can institutions remain secure while still tackling cyber threats effectively?
Approaches that work
To counter these challenges, higher education leaders are adopting strategies that move beyond simple prevention. Instead, they focus on building resilience that allows institutions to withstand incidents and recover quickly after an attack.
Many institutions lack the in-house capacity for 24/7 threat monitoring. As a result, they outsource parts of their security operations to external partners. These partners provide expertise and continuous coverage. This approach offers a practical and efficient way for colleges and universities to manage security while tackling cyber threats. It also allows institutions to build relationships with technology partners who understand academic environments and financial constraints.
Another effective strategy focuses on layered defence. Institutions deploy interlocking security tools that protect different parts of the network. This model requires stronger internal capability, but it gives universities greater control.
The University of Miami Health System offers a clear example. It manages patient data, research information and student records within a complex environment. The institution implemented a zero-trust architecture and deployed multiple firewalls with our support. This layered approach ensures that if one defence fails, others still protect critical assets.
The power of partnership and preparation
When the Universidad Autonoma de Barcelona (UAB) faced a ransomware attack during a long holiday weekend in 2021, it refused to pay the ransom. Instead, it restored operations quickly. That success resulted from preparation.
The university had a response plan aligned with Spain’s National Security Framework. It also had specialists trained to execute the plan. Strong relationships with government security agencies, law enforcement and technology partners enabled recovery without engaging attackers.
However, this level of preparedness did not happen overnight. It emerged through leadership commitment, consistent investment and regular exercises. The institution tested assumptions and plans long before an attack occurred. These actions strengthened its ability to respond and recover while tackling cyber threats.
Government guidance also plays a role in driving improvement. South Africa’s National Cybersecurity Policy Framework (NCPF) provides direction for institutions. In addition, stricter requirements from cyber-insurers encourage better practices. Together, these pressures help universities strengthen their overall security posture.
Cultivating the next generation of defenders
Technology, preparation and partnerships matter, but people remain central to cybersecurity. Colleges and universities must develop individuals who understand the cybersecurity landscape and its risks.
South Africa’s higher education sector already offers diverse cybersecurity training pathways. Universities such as the University of Johannesburg, the University of Cape Town, Wits University and Stellenbosch University offer MSc degrees and short courses.
These programmes cover areas including cryptography, ethical hacking and digital forensics. Meanwhile, institutions such as Eduvos and Berea Technical College provide certificates and occupational qualifications. These programmes support long-term capacity building and contribute to tackling cyber threats nationally.
Moving forward, together
For higher education technology leaders deciding where to focus, several priorities stand out:
- Get clear on what needs protecting and why. Not all assets carry equal risk. Identify critical assets such as research data, student records or financial systems, and prioritise their protection.
- Build relationships early. Whether working with trusted technology partners, law enforcement or peer institutions, connections matter most before a crisis occurs.
- Test assumptions regularly. Run tabletop exercises and simulate attacks. Identify weaknesses in plans before an incident exposes them.
- Have a cultural conversation. Security extends beyond IT teams. It requires buy-in from leadership, faculty and students. Explain why security matters and involve stakeholders in solutions.
Building resilience together
Cybersecurity in higher education will remain challenging. However, institutions that rethink traditional approaches and invest in both technology and people continue to build resilience. Their progress shows that tackling cyber threats requires sustained effort and collaboration.
We work with colleges and universities to deliver tools and expertise that support this mission. These include secure data recovery solutions and layered defence architectures.
Our goal is to act as a partner that understands institutional environments and constraints. Institutions that succeed do not work in isolation. Instead, they build strong partnerships that help them prepare, respond and recover with confidence.
