Cybersecurity Strategy and Roadmap for higher education

As a leading higher education institution, the client recognises the importance of continuously innovating its approach to learning, teaching, research, and administration — including the adoption of new and emerging technologies. The organisation had established solid foundations for developing its cybersecurity capacity and capability amid a rapidly evolving threat landscape and shifting regulatory environment, but recognised the need to further strengthen its posture to reach the desired level of maturity. Evinact was engaged to support the organisation through the development of a multi-year Cybersecurity Strategy and Roadmap.​

With deep expertise in cybersecurity, emerging technologies and their implications, Evinact began by producing a Current State and Gap Analysis Report. Drawing on the Essential Eight Framework from the Australian Signals Directorate, a desktop exercise workshop identified the organisation’s indicative maturity level. Ensuring alignment with relevant legislation and regulations, as well as industry best practice, the review also included stakeholder workshops and a comprehensive analysis of existing policies and procedures.

With a clear understanding of the client’s existing cybersecurity maturity across people, process, technology and data, we developed a multi-year Cybersecurity Strategy and Roadmap which included:

• A program of work to address the challenges, risks and opportunities identified in the Current State and Gap Analysis
• Development of the organisation’s cybersecurity vision, principles, and key risk areas
• Initiatives for each risk area with targeted actions and activities.

As a result of working with Evinact, the higher education institution now has a clear path to enhancing its cybersecurity maturity while maintaining the trust of its students, staff, partners, and the broader community. By implementing the initiatives outlined in the Cybersecurity Strategy and Roadmap, the organisation is taking a pragmatic approach to mitigating cybersecurity risks across people, processes, technology, and data.

A cybersecurity strategy is essential for protecting your data, your customers and your reputation in an increasingly digital world. Get in touch with the Evinact team to discuss how we can help you.