The webinar “Cybersecurity in University,” held on 16 June 2025, aimed to raise awareness among TRUST consortium members about the cybersecurity practices implemented at the University of Tartu. Designed as both an informative session and a training activity, the webinar focused on increasing participants’ understanding of major cyber threats — including phishing, denial-of-service attacks, ransomware, identity theft, and hacking. The webinar was attended by more than 50 participants and included both academic and non-academic staff members. 

The webinar was successfully delivered in English via Zoom and featured Risto Rahu, Chief Information Security Officer and Head of the Information Security Division at the University of Tartu.

Risto Rahu’s presentation focused on the central idea that cybersecurity is not solely a technical concern but a shared responsibility. He stressed that every member of a university community — from IT professionals to academic staff and students — has a role in safeguarding digital systems, personal data, and institutional operations.

A significant portion of the webinar was dedicated to outlining the evolving cyber threat landscape. Risto Rahu explained how universities are increasingly targeted by a variety of malicious actors, including state-sponsored hackers, cybercriminals, hacktivists, and insiders. The value of research data and the relatively open nature of academic IT environments make universities especially vulnerable.

To illustrate the potential consequences of cyberattacks, Risto Rahu shared real-world examples of ransomware incidents, phishing campaigns, and data breaches. These cases showed how cyber incidents can severely disrupt teaching, research, and the overall functioning of a university.

The webinar also highlighted essential cyber hygiene practices. Risto Rahu advised attendees to adopt secure password habits (including the use of password managers), enable two-factor authentication, update software regularly, back up important data, and be cautious with email links and downloads. He pointed out that human error is often the weakest link in cybersecurity and that simple daily habits can significantly reduce risks.

Risto Rahu also presented the cybersecurity governance model of the University of Tartu, which is based on internationally recognized standards such as ISO/IEC 27001. He explained how the university incorporates these frameworks through regular training, risk assessments, and clear reporting protocols — emphasizing the need for both policy and practical implementation.

Concluding his talk, Risto encouraged participants to view cybersecurity as an enabler of trust and digital collaboration, rather than a barrier. He stressed that cultivating a strong security culture is vital for creating resilient and future-ready academic institutions.

The session ended with an engaging Q&A, where attendees inquired about the tools and approaches used at the University of Tartu. Participants expressed strong appreciation for the webinar’s practical insights and accessible guidance, making it a valuable training experience for the TRUST network.

For additional inforamtion, please contact Anna Beitane (Head of Digital Education Projects), University of Tartu. 

Webinar: Cybersecurity in University – June 16. 2025. (University of Tartu)

The webinar “Cybersecurity in University,” hosted by the University of Tartu (Estonia) will be organized on June 16, from 12:00 to 13:00 (Central European Time). The training will be delivered in English and will take place in Zoom environment. The training will be delivered by Risto Rahu, Chief Information Security Officer and Head of the Information Security Division at the University of Tartu.

The main aim of the webinar is to share the University of Tartu’s experience in training both academic and non-academic staff in cybersecurity hygiene. Participants will learn best practices for organizing such training, as well as essential elements for effectively educating staff in this area. The session will highlight key risks in everyday computer use and provide practical examples and questions to help staff identify and avoid these risks.

The target audience for this training is both academic and non-academic staff members of the TRUST consortium