{"id":74967,"date":"2025-06-30T09:08:55","date_gmt":"2025-06-30T08:08:55","guid":{"rendered":"https:\/\/www.intelligentcio.com\/africa\/2025\/06\/30\/the-cisos-dilemma-securing-a-university-without-closing-it-down\/"},"modified":"2025-07-21T14:15:46","modified_gmt":"2025-07-21T13:15:46","slug":"the-cisos-dilemma-securing-a-university-without-closing-it-down","status":"publish","type":"post","link":"https:\/\/www.intelligentcio.com\/africa\/2025\/06\/30\/the-cisos-dilemma-securing-a-university-without-closing-it-down\/","title":{"rendered":"The CISO\u2019s dilemma: Securing a university without closing it down"},"content":{"rendered":"\n

Galeboe Mogotsi, CISO at University of Witwatersrand, reveals the academic sector’s unique vulnerabilities and how a collaborative, people-first approach is key to its digital resilience.<\/p>\n\n\n\n

In a digital landscape where threats evolve quicker than policies can adapt, South Africa\u2019s universities have become prime targets for cybercrime. Open by design and decentralised by nature, higher education institutions confront increasing threats to intellectual property, research outputs and student data. <\/p>\n\n\n\n

For Galeboe Mogotsi, Chief Information Security Officer at Wits ICT, the solution lies not only in firewalls and filters but also in fostering a culture shift that balances collaboration with vigilance.<\/p>\n\n\n\n

\u201cWe\u2019re not like corporates,\u201d Mogotsi said, speaking from his Johannesburg office. \u201cUniversities are inherently open, fluid and collaborative. That\u2019s what makes them valuable. But it also makes them vulnerable.\u201d<\/p>\n\n\n\n

There are several challenges; phishing remains the most persistent and widespread threat, with students and academics regularly targeted by socially engineered emails to extract login credentials.<\/p>\n\n\n\n

Once attackers are in, they can move laterally through systems, mining sensitive data or disrupting operations. \u201cPhishing is still number one,\u201d Mogotsi confirmed. \u201cBut ransomware is catching up, and we\u2019re also seeing more data breaches \u2013 particularly as we operate across hybrid environments that include both on-premise and multi-cloud systems.\u201d<\/p>\n\n\n\n

Complicating matters further is the ever-present risk of internal missteps. \u201cYou can have all the best security tools in place,\u201d he said, \u201cbut it only takes one person to click the wrong link.\u201d<\/p>\n\n\n\n

\"\"
Galeboe Mogotsi, CISO at University of Witwatersrand <\/em><\/figcaption><\/figure>\n\n\n\n

An architecture of readiness<\/strong><\/p>\n\n\n\n

In response, Wits ICT has built what Mogotsi described as a \u2018multi-layered\u2019 security approach. It includes advanced email filtering systems, routine security awareness training for staff and students, and constant network monitoring. Like many institutions across South Africa, Wits also partners with a managed Security Operations Centre (SOC), a move driven by the chronic shortage of cybersecurity talent within academia.<\/p>\n\n\n\n

\u201cWe don\u2019t have the luxury of large security teams,\u201d he explained. \u201cThe managed SOC fills that gap and provides us with ongoing threat intelligence and monitoring capabilities.\u201d<\/p>\n\n\n\n

But this is more than a matter of technical controls. Preparedness is as much about mindset as it is about machines. \u201cWe\u2019ve moved away from thinking about whether an attack will happen,\u201d Mogotsi said. \u201cNow, it\u2019s about how well we can respond when it does.\u201d<\/p>\n\n\n\n

An incident response plan is firmly in place, and data protection protocols are being reinforced \u2013 particularly around critical research data. Access management has also been tightened to limit the impact of insider threats. Still, Mogotsi knows that the institution\u2019s open culture can\u2019t be compromised in the name of control.<\/p>\n\n\n\n

Balancing openness with risk<\/strong><\/p>\n\n\n\n

\u201cWe don\u2019t want security to become a barrier to learning,\u201d he said. \u201cThe university experience depends on the freedom to share, experiment and build things together. Security controls must respect that.\u201d<\/p>\n\n\n\n

To maintain this equilibrium, Wits uses adaptive security policies \u2013 frameworks that scale protections depending on context and risk. In parallel, Mogotsi and his team regularly engage with academic staff and student representatives, ensuring cybersecurity concerns are understood and integrated without disrupting the learning environment.<\/p>\n\n\n\n

\u201cThis can\u2019t be a top-down imposition,\u201d he added. \u201cPeople need to understand why security matters and how it protects what they value.\u201d<\/p>\n\n\n\n

Embedding cybersecurity into Digital Transformation<\/strong><\/p>\n\n\n\n

Cybersecurity is no longer an afterthought in Digital Transformation efforts at Wits \u2013 it\u2019s a foundational pillar. Mogotsi is involved from the outset of any new project led by the CIO or other departments, ensuring risks are assessed early and mitigated before systems are deployed.<\/p>\n\n\n\n

\u201cIf you involve security at the end, we become the bottleneck. That\u2019s not the reputation we want,\u201d he said. \u201cI\u2019ve raised my hand and said: bring us in from the beginning.\u201d<\/p>\n\n\n\n

This approach extends across departments and faculties. As teaching and learning increasingly move onto digital platforms, Mogotsi ensures alignment between academic innovation and institutional security policies. Cross-functional working groups help identify gaps and set shared priorities.<\/p>\n\n\n\n

The cybersecurity budget is discussed openly with other stakeholders, tying investment decisions to broader institutional goals.<\/p>\n\n\n\n

The talent tug-of-war<\/strong><\/p>\n\n\n\n

One of the most pressing concerns is the lack of cybersecurity talent across the public sector. \u201cWe\u2019re a public university,\u201d Mogotsi said candidly. \u201cWe can\u2019t match the salaries that banks or big tech firms offer. When our staff are poached, we can\u2019t compete financially.\u201d<\/p>\n\n\n\n

To adapt, his team focuses on upskilling internal talent, especially in areas like AI and threat detection. Managed SOC services fill some of the remaining gaps. But Mogotsi is also thinking long-term.<\/p>\n\n\n\n

He\u2019s begun advocating for a collaborative national approach that draws from the student pipeline. \u201cWhy can\u2019t we tap into our third and fourth-year computer science students? We train them, partner with industry and build a talent pipeline for all 26 public universities in South Africa.\u201d<\/p>\n\n\n\n

He\u2019s already initiated conversations with fellow CISOs and academics to explore creating a shared cybersecurity training and internship platform. \u201cThe talent is already here. We need to organise it and focus it.\u201d<\/p>\n\n\n\n

A lesson from crisis<\/strong><\/p>\n\n\n\n

Mogotsi’s philosophy regarding cybersecurity was shaped by a previous experience he describes as a turning point. While working for another organisation \u2013 he declines to name it \u2013 a major breach exposed just how unprepared they were. \u201cIt was a wake-up call,\u201d he said. \u201cIt forced me to think differently about what resilience really means.\u201d<\/p>\n\n\n\n

The breach prompted a complete overhaul in how he approached leadership: greater focus on incident response, clearer communication channels and a more profound commitment to embedding cybersecurity culture into every layer of the organisation. \u201cCybersecurity isn\u2019t just about firewalls and policies,\u201d he said. \u201cIt\u2019s about people. It\u2019s about awareness. It\u2019s about creating a collective sense of responsibility.\u201d<\/p>\n\n\n\n

Building shared defences<\/strong><\/p>\n\n\n\n

Mogotsi also advocates for a more unified front across the higher education sector. \u201cWe\u2019re all fighting the same enemy,\u201d he said. \u201cEvery university holds student data, IP, and research outputs. Yet our threat intelligence is fragmented.\u201d<\/p>\n\n\n\n

All 26 public universities in South Africa share the same national research and education network. Mogotsi argues that this commonality should allow for a unified threat intelligence platform \u2013 a shared cybersecurity backbone that can spot patterns and alert institutions before it\u2019s too late.<\/p>\n\n\n\n

He\u2019s begun reaching out to peers and even national government bodies to advance this idea. \u201cIf we collaborate and build this together, we\u2019ll be far stronger than any university can be alone.\u201d<\/p>\n\n\n\n

Advice to the Next Generation<\/strong><\/p>\n\n\n\n

For young professionals entering cybersecurity \u2013 especially within the academic or public sector \u2013 Mogotsi offers simple advice: be intentional, stay curious and never stop learning.<\/p>\n\n\n\n

\u201cCybersecurity evolves constantly. You must evolve with it,\u201d he said. He recommends pursuing certifications, engaging with online simulations, and joining professional communities. He serves as Vice President of the Cloud Security Alliance\u2019s local chapter, supporting training and best practices.<\/p>\n\n\n\n

\u201cUnderstand how cybersecurity fits into the broader mission of your organisation. Especially in academia, it must be woven into the fabric \u2013 not forced on top of it.\u201d<\/p>\n\n\n\n

The work is demanding. The hours can be extended. And the enemies are often invisible. But for Mogotsi, the reward lies in knowing you\u2019re protecting the future \u2013 one system, one student, one step ahead of the next threat.<\/p>\n\n\n\n

\u201cWe are soldiers,\u201d he said. \u201cNot in uniform, but on the frontlines of a different kind of war. One that\u2019s fought with knowledge, vigilance and the willingness to stay ahead of what others don\u2019t see coming.\u201d<\/p>\n","protected":false},"excerpt":{"rendered":"

Galeboe Mogotsi, CISO at University of Witwatersrand, reveals the academic sector’s unique vulnerabilities and how a collaborative, people-first approach is key to its digital resilience. In a digital landscape where threats evolve quicker than policies can adapt, South Africa\u2019s universities have become prime targets for cybercrime. Open by design and decentralised by nature, higher education […]<\/p>\n","protected":false},"author":4338,"featured_media":74969,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[328,260,262],"tags":[385,496,388,406,277,10],"class_list":["post-74967","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-features","category-regional-news-newsletter","category-used","tag-africa","tag-ai","tag-cybersecurity","tag-middle-east","tag-ransomware","tag-security-2"],"acf":[],"publishpress_future_workflow_manual_trigger":{"enabledWorkflows":[]},"_links":{"self":[{"href":"https:\/\/www.intelligentcio.com\/africa\/wp-json\/wp\/v2\/posts\/74967","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.intelligentcio.com\/africa\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.intelligentcio.com\/africa\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.intelligentcio.com\/africa\/wp-json\/wp\/v2\/users\/4338"}],"replies":[{"embeddable":true,"href":"https:\/\/www.intelligentcio.com\/africa\/wp-json\/wp\/v2\/comments?post=74967"}],"version-history":[{"count":6,"href":"https:\/\/www.intelligentcio.com\/africa\/wp-json\/wp\/v2\/posts\/74967\/revisions"}],"predecessor-version":[{"id":75498,"href":"https:\/\/www.intelligentcio.com\/africa\/wp-json\/wp\/v2\/posts\/74967\/revisions\/75498"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.intelligentcio.com\/africa\/wp-json\/wp\/v2\/media\/74969"}],"wp:attachment":[{"href":"https:\/\/www.intelligentcio.com\/africa\/wp-json\/wp\/v2\/media?parent=74967"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.intelligentcio.com\/africa\/wp-json\/wp\/v2\/categories?post=74967"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.intelligentcio.com\/africa\/wp-json\/wp\/v2\/tags?post=74967"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}