Cybersecurity Symposium

1. CyberSecurity:
Top Issues for Public Institutions
Bo Wandschneider
CIO- University of Toronto
Isaac Straley
CISO – University of Toronto

2. How Big is the Problem?

4. Spotlight: Australia Nation University Breach
Details
Accessed in late 2018, announced June 4
Involves “significant amounts” of personal staff, student and visitor data extending
back 19 years, ~200,000 affected
may include “names, addresses, dates of birth, phone numbers, personal email addresses and emergency contact
details, tax file numbers, payroll information, bank account details and passport details. Student academic records were
also accessed.”
As a case study
Tracking ~60 stories, national (AU) and international
4

6. External Reputation Monitoring
6

8. Who’s Responsibility is it to defend
against cyber attacks?

9. One Team, One Fight – Our Shared Fate
The “Old” Security Model
End state – “we are secure”
• Security is IT’s job
• Lock it down
• Plugging the holes
• A solution in search of a problem
• Security versus convenience
• “If only we had more…” Money,
Time, People
• See no evil, hear no evil, speak no
evil
The “New” Security Model
End state – “Managed risk”
• Security is everyone’s responsibility
• Enable the mission and values of
the university
• Empower individuals and units
• Resources allocated based on risk
• Assume you are breached – find
intruders and kick them out!

10. How Should we Approach Education and
Awareness

11. Small, personal, specific
• https://securityplanner.org
• https://sec.eff.org/topics
• https://www.sans.org/security-
awareness-training
• https://myaccount.google.com/s
ecurity-checkup

12. Tell us More about Phishing

13. Why are “they” trying to get our
Credentials?

15. Who are “THEY”?

17. What are we doing in Higher Education?

18. Canadian Shared Security Operations Centre (CanSSOC) is:
• A shared proof of concept project
• Based in part on a model initiated in the US higher education system
• Being pursued in partnership with six Canadian universities:
• The University of British Columbia,
• University of Alberta,
• McMaster University,
• McGill University,
• Ryerson University,
• University of Toronto.
• In Partnership with the National Research & Education Network
• CANARIE – federal
• Cybera - Alberta
• ORION - Ontario
• RISQ – Quebec
• BCNET – British Columbia

19. “Together we see more”
Global profile
Attracting talent
Economies of scale
Higher Ed focus

20. Questions