Higher education institutions face a unique and evolving cybersecurity landscape, where openness, digital learning and constrained budgets collide with rising threats such as ransomware, phishing and data breaches. Musa Masungwini, Data Protector and Cyber Defender at Dell Technologies South Africa, explains why resilience in the sector now depends on the right balance of technology, partnerships and people.
Higher education institutions face cybersecurity challenges unlike those encountered in many other sectors. The major threats faced by South African universities include prevalent ransomware, phishing, data breaches, insider threats, reliance on third parties and a significant skills gap. These challenges are amplified by the shift to digital learning and constrained budgets, creating an urgent need for stronger policies, increased awareness and sustained investment.
In South Africa and globally, open networks designed to facilitate collaboration, transient student populations and limited funding all broaden the opportunity for cyberattacks. In addition, institutions are home to vast volumes of research data, personally identifiable information, financial records and intellectual property, making them particularly attractive targets.
In many respects, the issue is cultural. Academic institutions are built on openness, shared governance and intellectual freedom. The strict access controls, monitoring and response protocols commonly used in corporate environments may not always be appropriate for colleges and universities, raising the question of how institutions can remain secure while preserving their core values.
Approaches that work
To counter these challenges, higher education leaders are increasingly adopting strategies that move beyond basic prevention to build comprehensive resilience, enabling institutions to withstand incidents and recover quickly.
Many institutions lack the in-house resources required for 24/7 threat monitoring and therefore choose to outsource elements of their security operations to external partners that can provide round-the-clock coverage and specialist expertise. This approach is both practical and efficient, allowing colleges and universities to work with technology partners that understand their operational environments and constraints.
Another effective strategy involves implementing a layered defence model, using interlocking security tools to protect different parts of the network. While this requires greater internal capability, it also offers increased control. For example, the University of Miami Health System, which manages a complex mix of patient data, research and student information, implemented a zero-trust architecture and deployed multiple firewalls with support from Dell Technologies. This multi-layered approach ensures that even if one layer is breached, others remain in place to protect critical assets.
The power of partnership and preparation
When the Universidad Autonoma de Barcelona (UAB) was hit by a ransomware attack during a long holiday weekend in 2021, it was able to reject the ransom demand and recover rapidly.
This success was the result of preparation. The university had a response plan aligned with Spain’s National Security Framework and a trained team ready to execute it. Strong relationships with government security agencies, law enforcement and technology partners such as Dell Technologies enabled UAB to restore operations without paying attackers.
That level of preparedness did not happen overnight. It was built through leadership commitment, sustained investment and the discipline to conduct regular exercises and test assumptions before an incident occurred.
Government guidance, including South Africa’s National Cybersecurity Policy Framework (NCPF), along with stricter requirements from cyber insurers, is also driving positive change. These standards encourage institutions to adopt best practices and strengthen their overall security posture.
Cultivating the next generation of defenders
Technology, preparation and partnerships are critical, but higher education institutions must also invest in developing people who understand the cybersecurity landscape.
South Africa’s higher education ecosystem offers a range of cybersecurity training opportunities. Universities such as the University of Johannesburg, the University of Cape Town, Wits University and Stellenbosch University offer MSc programmes and short courses in areas including cryptography, ethical hacking and digital forensics. Meanwhile, institutions such as Eduvos and Berea Technical College provide certificates and occupational qualifications.
Moving forward together
For higher education technology leaders deciding where to focus, several priorities stand out:
- Identify what matters most. Not all assets carry the same level of risk. Determine which systems and data are most critical and prioritise their protection.
- Build relationships early. Trusted technology partners, law enforcement agencies and peer institutions should be engaged before a crisis occurs.
- Test assumptions. Tabletop exercises and simulated attacks help identify weaknesses before a real incident exposes them.
- Address culture. Cybersecurity is not solely an IT issue. It requires engagement from academic leadership, faculty and students to be effective.
Building resilience together
Cybersecurity in higher education will always present challenges. However, institutions that are willing to think differently and invest in both technology and people are building long-term resilience.
At Dell, we work with colleges and universities to provide tools and expertise that support this mission, from secure data recovery solutions to layered defence architectures. Our goal is to act as a partner that understands institutional environments and helps organisations prepare for, respond to and recover from cyber incidents with confidence. Those institutions that succeed are rarely doing it alone — they are building strong partnerships that enable resilience at every stage.
