Cybersecurity

Cybersecurity has evolved from a technical issue to a central enterprise and institutional risk. As cyber threats increasingly target universities, colleges, and research organizations, implementing robust cybersecurity controls and governance is now a critical component of institutional risk management.

This track will examine how cyber risks influence decision-making in Canadian post-secondary institutions, highlight the latest strategies, technologies, and frameworks for defense, and explore collaborative approaches to strengthen resilience across Canada’s connected and data-driven academic landscape.

Strategic Leadership and Governance

• Evolving cybersecurity strategies to match an evolving threat landscape

• Building resilience and recovery into institutional cybersecurity frameworks

• Integrating cybersecurity into institutional strategic planning and digital transformation

• Measuring cybersecurity effectiveness and communicating value to leadership

Collaboration and Sector-Wide Coordination

• Security initiatives and partnerships across higher education and research sectors

• Cybersecurity challenges in research data management and academic collaborations

• Supply chain and vendor risk management for post-secondary institutions

• Sector-wide response coordination and shared services (e.g., eduroam, CANARIE, InCommon)

Technical Innovation and Emerging Technologies

• AI and automation in threat detection and response

• Zero Trust architecture: what implementation looks like in higher ed

• Quantum computing and the future of encryption

• OT/IoT convergence risks in campus and lab environments

Operational Security and Resilience

• Threat detection, monitoring, and incident response automation

• Data protection and privacy in multi-cloud environments

• Authentication and identity management strategies (e.g., MFA, SSO, IAM frameworks)

• Digital forensics and incident response (DFIR)

• Disaster recovery and business continuity planning

Human Factors and Institutional Culture

• Building a cybersecurity culture among staff, faculty, and students

• Role-based awareness and training (IT, researchers, and executives)

• Tabletop exercises and readiness simulations

• Managing insider risk and human error