Critical Risks
1
High Risks
2
Medium Risks
2
Strategic Goal
Reduce Critical and High Risks Before the Next Academic Registration Cycle
$60K–$88K
Three strategic programs · Board approval requested
St. Francis College · 2,500 students
MFA Coverage
60%
Vendor Assessments
0%
IR Testing Status
Not Tested
FERPA Audit Logging
Partial
Top Institutional Risks
Strategic Priorities
Security Awareness & Phishing Resilience
$18K-$25K/yr
Zero Trust Access & Identity Governance
$30K-$45K Y1
Third-Party Risk Management
$12K-$18K Y1
Program Mission
Establish a risk-based cybersecurity program that protects FERPA-regulated student data, F-1 immigration records, and mission-critical academic systems while aligning with NIST CSF 2.0 governance principles appropriate to a tuition-dependent liberal arts institution.
We request Board approval of this strategy and Year 1 funding to reduce Critical and High risks before the next academic registration cycle.
- ·Approve Year 1 security budget of $60K-$88K across three strategic initiatives
- ·Adopt the cybersecurity oversight charter for Board review
- ·Mandate IR playbook completion and tabletop exercise by Month 6
- ·Authorize CISO to enforce MFA and vendor questionnaire program