Colleges and universities are top targets for cyberattacks, from malware to ransomware to data theft. Besides being attractive to threat actors – in part because they store large quantities of personally identifiable information (PII), research data and intellectual property -- higher education institutions may lack necessary security infrastructure, IT skills and staffing.