Cyber Security Team Spotlight

The Trinity Cyber Security team is based in IT Services and provides a cross section of services from the detection and resolution of security incidents to the delivery of training and awareness sessions. The team also works to review new IT systems and solutions that staff and students wish to use in the delivery of their teaching, learning and research activities.

The evolving security threat landscape in conjunction with the move to hybrid working and digital transformation have rapidly increased the volume and complexity of demands on the Trinity Cyber Security team, but we like to think that we have risen to the challenge!

In 2023 the team implemented a new 24/7 monitoring service for critical University infrastructure to better protect the University. We also introduced a new Phishing simulation tool which we use to help train staff to recognise phishing emails in their inbox.

In 2024 we plan to produce a new and improved online training module for staff, we will also be working on some significant changes to infrastructure and services in IT Services to improve the level of protection in place for everyone.

Here’s a quick run through of some of the services the Cyber Security team provides to the University:

• The cyber security team is responsible for the University wide user security awareness program.  This includes responsibility for the selection and creation of suitable training materials, as well as the delivery of a program of online and in-person awareness sessions.
• The cyber security team organises annual high profile security awareness events such as Cyber Security Awareness Month in October and Cyber Security Week for all staff and students in January each year.
• Check out the Cyber Crime Watch Hub and the online Cyber Security Training Module and the new Phishing Training Service for more information.

• The cyber security team is on call 24/7 in the event of critical security incidents and is responsible for managing the University wide response.
• The cyber security team is responsible for managing the SIEM (Security Incident event management) and SOC (Security Operations Centre) service for the University. This is a new service implemented in 2023 which provides 24/7 monitoring of University IT security information from a specialised centre.

• The Cyber Security team is responsible for ensuring that all reported or detected cyber security incidents are investigated and appropriate mitigating measures are implemented where necessary.  This service covers Incidents which occur within IT Services managed infrastructure or on infrastructure managed by distributed IT teams or Research groups in the University or in third party hosted services and solutions.

• The cyber security team develops and publishes the University Security Policy ensuring that it reflects recent best practice and legal compliance requirements.

• The Cyber Security team collaborates with the Data Protection Officer and the Data Protection Officer for Research to ensure the University meets its obligations to adhere to the cyber security criteria required under the GDPR.

• The cyber security team identifies and reports on current and emerging cyber security risks to the University and recommends/implements appropriate controls.

• The cyber security team delivers a program of vulnerability testing through the team which involves regular testing of all the University IT equipment and software for security bugs and weaknesses. This program is a critical component in ensuring the University is protected from cyber attack.

• The cyber security team maintains the University IT Disaster Recovery Plan with annual updates.

• The cyber security team in collaboration with the Research IT group in IT Service provides advice and review services to the Research community.

• The cyber security team project manages cyber security related technical projects, these have totalled €3.2m in the last 10 years.
• Significant achievements of these projects include the Microsoft 365 migration project, the rollout of encryption to all University desktops, and the implementation of Multifactor authentication.