Services available to help researchers secure and protect data and systems
Research projects often involve sensitive information, specialized technologies, external collaborators, and research infrastructure. Information Security Services (ISS) can help researchers identify risks, make informed decisions, and implement appropriate safeguards throughout the research lifecycle.
Plan and assess
Research cybersecurity consultation
Not sure where to start? Information Security Services can help researchers obtain guidance on cybersecurity requirements and secure research data handling.
Contact: ist-researchsecurity@uwaterloo.ca
Research project cybersecurity planning
Help Principal Investigators and research teams identify cybersecurity requirements and develop security plans early in the research lifecycle.
Research data risk classification
Determine the sensitivity of research information, which affects how it should be stored, shared, processed, and protected.
Information Risk Assessment (IRA)
Assess the risks associated with software, cloud services, vendors, research platforms, and artificial intelligence tools before adoption.
Protect research infrastructure
Vulnerability management
Identify and remediate vulnerabilities in research systems through scanning and security assessments.
Endpoint detection and response
Protect research computers, servers, and other endpoints through monitoring and malicious activity prevention and detection.
Device encryption
Protect research information on laptops, mobile devices, and tablets at rest and in transit through encryption.
See: Device encryption
Dectect and respond
Email security
Passwords, password managers, multi-factor authentication (MFA), and email security help protect research accounts and information from unauthorized access and phishing attacks.
See:
Physical intrusion detection
Protect research spaces and equipment through intrusion detection systems, alarm monitoring, and physical security controls.
Security incidents and data breaches
Know what to do when research information is lost, exposed, altered, or accessed without authorization.
Cyber awareness training
Cybersecurity and research security training courses to help researchers develop cyber literacy, protect research data, and meet training expectations associated with research funding and research security requirements. Training covers secure data handling, research security, cyber hygiene, privacy, and the protection of sensitive research information.
See: