Brad Grimes
October 21, 2026
Higher education security leaders discuss the importance of managing vendor-related risk.
Higher education’s reliance on third-party software and Software as a Service platforms has never been more consequential. Recent attacks on learning management systems and other platforms used by higher education institutions have demonstrated how a vulnerability at a technology provider can become a problem for institutions that depend on it.
For universities, the challenge is particularly acute. Third-party applications are embedded in teaching, research, administration and student services, often handling enormous amounts of sensitive data. How can institutions take advantage of these technologies without assuming that a trusted vendor is necessarily a secure one? How do they assess risk, balance security with the need for innovation, monitor vendors after deployment and prepare for the possibility that a compromise somewhere in the software ecosystem could ultimately affect their institutions?