Establish a comprehensive university-wide cybersecurity governance framework that clearly defines risk appetite, strengthens institutional policy development, and embeds security practices into strategic planning and leadership decision-making. Includes risk registers, formal policy frameworks, executive and board reporting, and Chief Information Security Officer (CISO) leadership functions.

Protect federally funded research programs through structured security programs that include system security plans, CUI handling procedures, export control compliance processes, and foreign collaboration risk reviews aligned with NSPM-33 research security requirements.

Reduce vendor and supply-chain cybersecurity risks through structured EdTech vendor security assessments, SaaS platform security evaluations, and third-party risk scoring frameworks designed to prevent breaches and ensure contractual compliance.
.