Salta al contenuto principale
Cyber Security Management

Cyber security is a core element of the University of Insubria’s digital transition and is embedded in the design, management and development of the University’s digital services. 

The approach focuses on centralised, continuous security management, combining organisational, technological and procedural measures to prevent incidents, reduce exposure to risk and strengthen the overall resilience of information systems. 

Security is managed and monitored as an ongoing process, rather than as a series of isolated or reactive measures, in line with the national regulatory framework and the University’s strategies.

Access to digital services is further protected through the adoption of strong authentication mechanisms, which significantly reduce the risk of credentials being compromised.

Endpoint Protection and Operational Monitoring
endpoint_AI

A central aspect of the security model is the protection of endpoints, encompassing the workstations and devices through which staff and students access the University’s digital services. The University has progressively adopted a centralised endpoint management model while fully respecting departmental autonomy. This enables consistent configuration, update and protection standards to be applied across a substantial number of devices located at its various sites.

This model is integrated with systems for collecting and analysing security events, enabling continuous monitoring of system status, timely detection of anomalies and support for incident prevention and response. This reduces fragmentation across solutions and improves long-term operational sustainability.

The University regards endpoints as a critical source of risk and fully integrates them into its security model, adopting solutions and practices designed to ensure:

  • device reliability and integrity;
  • the protection of locally processed data;
  • a reduction in the risks arising from insecure configurations or inappropriate use.

The implemented model incorporates advanced monitoring, fault prevention and proactive management capabilities, enabling performance issues to be identified promptly and remedial action to be planned before they cause disruption for end users. The indicators collected also inform investment decisions and equipment replacement policies.

As part of its ongoing development, the University has broadened the concept of endpoints to include digital devices supporting teaching and institutional activities (audio-visual systems, cameras, projectors and other digital equipment), promoting a unified, integrated view of its technological ecosystem. Integration with advanced security and event analysis tools further strengthens incident prevention, detection and response capabilities, in line with a mature, systematic approach to digital transformation.

Data Governance and Protection

Alongside infrastructure and device security, the University pays particular attention to data and information protection, recognising their strategic value for institutional activities and the need to safeguard them throughout their lifecycle. The policies and solutions adopted aim to ensure consistent, traceable and proportionate data processing, balancing accessibility and sharing needs with requirements for confidentiality, integrity and protection, including those relating to personal data and sensitive information.

From this perspective, cyber security and data protection are regarded as closely integrated aspects of a single information governance model.

User Awareness, Training and Accountability
PcAdobeStock_609881250

A key feature of the University’s security model is its emphasis on user awareness and accountability, recognising users as an integral part of the overall protection framework. 

Within this framework, the University provides structured, mandatory cyber security training for staff, aimed at promoting good practice, reducing the risks associated with human error and strengthening the ability to recognise potentially dangerous situations. 

Training is complemented by ongoing assessment and awareness-raising initiatives, including simulated phishing campaigns, used as an educational tool to progressively increase vigilance across the academic community. This approach combines technological measures with a shared security culture, strengthening the overall effectiveness of efforts to prevent incidents and build digital resilience.

Pilot Initiatives and Integration with Privacy Governance

As part of its commitment to continuous improvement, the University also pilots advanced tools and solutions for digital information governance and protection, aiming to strengthen data classification, protection and informed management. These initiatives are introduced in a controlled, phased manner and closely coordinated with personal data protection assessment processes, in collaboration with the Data Protection Officer (DPO). The pilot initiatives are therefore subject to the necessary compliance checks and impact assessments required by applicable legislation, ensuring a balance between technological innovation, the protection of rights and organisational sustainability.

Pilot Initiatives and Further Developments in Endpoint Security

Building on its centralised endpoint management model and commitment to continuous improvement, the University plans to launch controlled trials of advanced endpoint security tools during 2026, including AI-based security agents. These trials aim to strengthen security event prevention, detection and analysis, supporting decision-making by ICT staff and integration with existing monitoring systems. The initiatives are introduced progressively and coordinated with security and personal data protection governance processes, subject to the compliance assessments and checks required by applicable legislation.

Detailed documentation on endpoint management and planned developments is available to support this work.

The management of endpoints and equipment assigned to individual users is a strategic pillar of the University’s digital transformation, directly strengthening security, operational reliability and the continuity of digital services supporting institutional, teaching and administrative activities.

The progressive adoption of a centralised endpoint management model, based on cloud-native platforms, ensures consistent configuration, update and protection standards for staff devices, teaching laboratory equipment and classroom workstations. This approach reduces the attack surface, mitigates security risks and simplifies the management of the University’s overall IT estate.

Endpoints and Equipment for Individual Users(italian)