Higher education had a whirlwind year in 2020 starting with the COVID pandemic, which continued through 2021. Information Technology professionals in higher education are tired, but unfortunately, there is no reprieve on the horizon. COVID brought forth remote work expectations that will continue to shape the future for years to come. I’ll address one key technology and one key trend below to watch below based on the 2021 Educause Information Security report("2021 EDUCAUSE Horizon Report, Information Security Edition," 2021), with supporting forces explaining the urgency behind these issues.
Keep on fighting the good fight higher ed IT! We are in this for the long haul, but we will be better for it.
Key Technology – Endpoint Detection
Security incidents and ransomware are on the rise in higher education ("2021 EDUCAUSE Horizon Report, Information Security Edition," 2021). Institutions are having to transition from response and recovery to prevention and identification strategies, including blocking malicious emails and controlling access. This has promoted the need for endpoint detection and response.
Two forces impacting the technology
Based on research from Absolute, over 70% of all security breaches start at endpoint devices, primarily through compromised credentials or degraded security systems ("2021 EDUCAUSE Horizon Report, Information Security Edition," 2021). Endpoint detection systems allow for remote remediation of security incidents, allowing for immediate mitigation of threats. This greatly reduces the potential adverse effects of a cyber incident and has a significant positive impact on information security but can be costly and require a significant financial investment on behalf of the institution. However, the cost of a potential cyberattack is daunting, with average data breach costs of 3.9 million, the potential for disrupted online learning, and can hurt an institutions’ credit profile (Seltzer, 2021).

Relevance for Information Security – Endpoint Detection and Response. [Infographic]. 2021 Educause Horizon Report, Information Security Edition. https://library.educause.edu/-/media/files/library/2021/2/2021_horizon_report_infosec.pdf?la=en&hash=6F5254070245E2F4234C3FDE6AA1AA00ED7960FB
Another force impacting endpoint detection is the increasing expansion of the Internet of Things (IoT). Students and staff bring a wide variety of devices on physical campuses daily, from smartphones to laptops and tablets. However, the IoT will create new devices and technologies that we can expect consumers to adopt and use in their daily lives. Gartner expects that IoT devices will increase by 43 billion by 2023 ("2021 EDUCAUSE Horizon Report, Information Security Edition," 2021), which will force the higher education industry to develop a plan to secure networks against non-University devices that need network access.
Key Trend – Remote work
Remote work was identified as an Uber Trend for in the 2021 EDUCAUSE Information Security Horizon Report because it has had far-reaching implications for information security and will continue to be a major force for years to come. It also presents the question of the “new normal,” and how higher education will look in the future, particularly for higher educational institutions with all or most of their students classified as on-campus learners.
Man on couch working on laptop with dog [photo]. Business Quick. https://bq-magazine.com/5-ways-you-might-sabotage-your-own-remote-work-efforts/
Two forces impacting the trend
One force impacting this trend is the control of devices allowed on a university network for business purposes. For example, should colleges ban the use of personal devices for business work, or block personal devices from accessing staff networks? If personal devices are allowed, should universities pay for endpoint protection for all personal devices that access the network, and be expected to be able to afford that expense? If universities say only university equipment can be used, are they slowing down progress on business-critical work, and is that plan feasible in a new era of work-from-home employees?
A second force impacting this trend is that many employees do not want to come back into the office. Working from home can give people better work-life balance and can allow hiring managers a deeper talent pool. However, many higher ed employees at campuses with on-campus students need to return to their campus before students to ensure some normalcy. But, there an be disparity among who returns and who stays as a work from home employee. Slack’s “Remote Employee Experience Index” shows that only 12% of skilled workers plan to return exclusively to an on-site office ("2021 EDUCAUSE Horizon Report, Information Security Edition," 2021).
References
2021 EDUCAUSE Horizon Report, Information Security Edition. (2021). Retrieved 9/27/2021, from https://library.educause.edu/-/media/files/library/2021/2/2021_horizon_report_infosec.pdf?la=en&hash=6F5254070245E2F4234C3FDE6AA1AA00ED7960FB
Seltzer, R. (2021). Cyberattacks Pose Credit Risks for Higher Education. Inside Higher Ed. Retrieved 10/1/2021, from https://www.insidehighered.com/quicktakes/2021/03/31/cyberattacks-pose-credit-risks-higher-education