Multimedia
Cybersecurity and IT risks
Higher education internal audit back-to-basics video series
Oct 10, 2024 · Authored by Morgan Mincy, Amanda Vellocido
Explore the world of information technology (IT) in higher education as Baker Tilly’s cybersecurity specialists present a detailed discussion on key risks, challenges and audit frameworks for colleges and universities.
The video highlights the following:
- Higher education institutions encounter diverse IT risks, such as reputational, competitive, operational, financial and regulatory issues. Addressing these risks is crucial for preventing significant impacts on enrollment, partnerships, research activities and more. Watch for specific challenges and examples of each type of risk!
- Implementing a recognized cybersecurity framework helps colleges and universities standardize processes, ensure regulatory compliance (e.g., HIPAA, GLBA) and conduct more consistent, efficient audits across decentralized IT structures. Explore commonly used frameworks in the video!
- Performing practical IT audits enhances an institution's risk management and cybersecurity posture. Align with best practices like the Institute of Internal Auditors’ (IIA) Three Lines Model for effective governance and risk management. See real examples of cyber incident response and vulnerability management audits in the video!
Watch this 20-minute video for answers to these questions:
- What key IT risks do higher education institutions face?
- Why is regulatory risk a concern in higher education IT environments?
- What IT challenges are specific to higher education institutions?
- How does a recognized framework improve cybersecurity audits?
- What frameworks are commonly used for cybersecurity audits in higher education?
- What is the IIA Three Lines Model, and how does it apply to cybersecurity?
- What are the benefits of using a framework like NIST or ISO in higher education IT audits?
- What is the purpose of a cyber incident response audit?
- How can institutions strengthen their cybersecurity posture by regularly assessing IT risks, adopting a recognized framework and conducting audits?
Presenters and subject matter specialists:
- Morgan Mincy, Manager, Risk Advisory
- Amanda Vellocido, Manager, Risk Advisory
Baker Tilly can help
Is your higher education institution prepared to address IT risks? Have you implemented a robust cybersecurity framework? To learn more about how Baker Tilly can help, reach out to us today!
Higher education internal audit back-to-basics
Catch up on the previous five videos in the series.
Procurement risks and controls
First video in Baker Tilly's internal audit series defines internal control and higher education procurement risks, while highlighting key components of the procurement cycle.
Student accounts and financial aid
The second episode of our higher education video series focuses on student accounts, highlighting key risks associated with financial aid and audit approach.
Gifts and advancement
Third episode of our internal audit back-to-basics video series discusses higher education donations and the gift management lifecycle, highlighting key risks and best practices.
Data analytics: questions, challenges and the analysis process
The fourth episode of our internal audit back-to-basics video series examines higher education data analytics in internal audit.
Navigating human resources and payroll compliance
Fifth episode of our internal audit series reviews key HR in higher education functions, highlighting risks and compliance challenges.
Internal audit resources for higher education
Navigate your higher education institution’s risk roadblocks with Baker Tilly’s internal audit trailblazers. Bookmark this resource center for the latest industry insights!
Cybersecurity insights
Discover more cybersecurity and IT insights to protect and enhance your higher education institution.
Adapting to NIST CSF 2.0: Navigating changes and challenges in higher education
Explores the challenges of implementing cybersecurity frameworks in higher education, major changes of NIST CSF 2.0 and how institutions can conduct audits using the updated NIST CSF version.
Cyber resilience: A guide to navigating modern risks
Discover essential cybersecurity practices and critical questions to enhance your cyber resilience in Baker Tilly’s cyber resilience guide.
AI: How to manage cybersecurity and data governance risks
In this webinar, Baker Tilly and HITRUST specialists discuss the benefits and risks of using AI platforms, various frameworks and how to protect your organization.
Elevate your cybersecurity program: Integrating program management and governance
Building strong cybersecurity safeguards requires governance, design, validation and monitoring to improve resilience and effectiveness.
Ransomware prevention guide
Our ransomware prevention guide explores eight leading cybersecurity practices to minimize an organization’s chance of a ransomware attack.
NIST publishes major revision to Cybersecurity Framework (CSF): What organizations need to know
NIST released a new version, NIST CSF 2.0, to address the evolving cybersecurity landscape and cybersecurity risks faced by organizations.
