Getting People to Care: Building a Privacy and Cybersecurity Culture at UBC

In today’s higher education landscape, escalating cyber threats make privacy and information security essential priorities. Universities like the University of British Columbia (UBC) face unique challenges, balancing open collaboration and research with the need to protect sensitive data. At UBC, we’ve learned that fostering a culture of awareness and accountability among faculty and staff is essential to safeguarding personal and institutional information. To address these risks, UBC’s Privacy Matters program has become a cornerstone of its risk management strategy, supported by a comprehensive communications strategy designed to engage faculty, staff, and leaders effectively.

This session will explore the evolution of the Privacy Matters @ UBC initiative, a program launched nearly a decade ago to address privacy and cybersecurity risks across the university. We’ll share how we’ve transformed this program into a cornerstone of UBC’s risk management strategy through innovative outreach, targeted training, and collaborative community-building efforts. Attendees will gain insights into the program’s evolution and practical strategies for engaging busy faculty and staff.

Key topics include:

• The foundation of Privacy Matters @ UBC: The origins of Privacy Matters and its goals to address higher education’s unique privacy and security challenges, supported by a tailored communications strategy to drive awareness and action.
  • The development and impact of mandatory training, including Privacy & Information Security Fundamentals and Privacy & Information Security for IT Professionals.
• Innovative engagement strategies introduced in 2024:
  • Monthly phishing workshops
  • Privacy Matters Champions Network
• Signature events and collaborative efforts
• Expanding our reach in 2025

Key takeaways for attendees:

• Actionable strategies to create a privacy and information security culture in diverse academic environments.
• Practical examples of engaging a community through interactive workshops, grassroots networks, and comprehensive communication strategies.
• Insights into what works—and what doesn’t—when encouraging busy faculty and staff to prioritize privacy and cybersecurity.

The session will conclude with an open discussion, inviting attendees to share their own experiences, challenges, and successes in promoting privacy and information security within their institutions. Together, we’ll explore opportunities for collaboration and knowledge-sharing.