Cybersecurity Risk Management Program

The Cybersecurity Risk Management Office protects the institution’s data, digital assets, and research through a structured, multi-tiered framework for identifying, assessing, mitigating, and monitoring information security risks. Aligned with federal, state, and industry regulations, the office supports Rutgers’ mission by enabling students, faculty, staff, and partners to achieve their goals while minimizing cybersecurity threats.

Utilizing established industry frameworks and methodologies, the Cybersecurity Risk Management team performs threat and vulnerability analyses, as well as conducts ongoing assessments, to identify potential risks. These risks are evaluated based on likelihood and impact, aligned with compliance requirements, and addressed through safeguards such as encryption, two-factor authentication, and endpoint protection. Continuous monitoring of risk and vulnerabilities, attack surface management, and third-party security assessments further strengthen the university’s cybersecurity posture.