Cybersecurity

Cybersecurity has evolved from a technical issue to a central enterprise and institutional risk. As cyber threats increasingly target universities, colleges, and research organizations, implementing robust cybersecurity controls and governance is now a critical component of institutional risk management.

This track will examine how cyber risks influence decision-making in Canadian post-secondary institutions, highlight the latest strategies, technologies, and frameworks for defense, and explore collaborative approaches to strengthen resilience across Canada’s connected and data-driven academic landscape.

Strategic and Program-Level Topics

• Evolving cybersecurity strategies to match an evolving threat landscape

• Building resilience and recovery into institutional cybersecurity frameworks

• Cybersecurity program maturity: growing an information security practice in higher ed

• Cybersecurity project prioritization: deciding what to do when everything feels urgent

• Governance, risk, and compliance in academic environments

• Integrating cybersecurity into institutional strategic planning and digital transformation

• Measuring cybersecurity effectiveness and communicating value to leadership

Emerging Trends and Technologies

• AI in defense technologies: opportunities and challenges

• Impact of AI on cybercrime and defense strategies

• AI and automation in threat detection, response, and awareness

• AI policy development in academic institutions

• Zero Trust architecture: what implementation looks like in higher ed

• Quantum computing and the future of encryption

• OT/IoT convergence risks in campus environments (building systems, labs, research networks)

Operational and Technical Security

• Endpoint and server protection strategies

• Network protection and segmentation best practices

• Authentication and identity management strategies (e.g., MFA, SSO, IAM frameworks)

• Data protection and privacy in multi-cloud environments

• Threat detection, monitoring, and incident response automation

• Digital forensics and incident response (DFIR): lessons from real-world cases

• Disaster recovery and business continuity planning

• Securing hybrid learning and research environments

Human Factors and Institutional Culture

• Rethinking cybersecurity communications and security awareness campaigns

• Building a cybersecurity culture among staff, faculty, and students

• Role-based awareness: tailoring training for IT, researchers, and executives

• Tabletop simulation exercises: practical readiness through scenario-based learning

• Managing insider risks and human error in a distributed academic environment

Sector-Specific and Collaborative Topics

• Security initiatives and partnerships across higher education and research sectors

• Cybersecurity challenges in research data management and academic collaborations

• Supply chain and vendor risk management for post-secondary institutions

• Shared services and federated identity in the higher ed ecosystem (e.g., eduroam, CANARIE, InCommon)

• Sector-wide response coordination: how well can a PSI absorb and recover from an attack

Market and Policy Insights

• Navigating the cybersecurity vendor market: trends, consolidation, and innovation

• National and provincial cybersecurity initiatives affecting higher ed

• Compliance with privacy and data protection regulations (e.g., FIPPA, GDPR)

• Funding and resourcing cybersecurity in public institutions