What can be done right now (5)
The university´s internal processes should be revised, even if (or particularly if) they have been working quite well for a long time. A few examples:
- is the internal communication secure enough, are for example, operational e-mails encrypted and signed?
- Are databases protected against unauthorized access? Are the built-in access restrictions correctly configured? Are they as strict as possible?