Eastern Connecticut State University Criticized for Insecure IT Practices
Eastern Connecticut State University (ECSU) has been criticized in a state audit for failing to secure its data center and lacking sufficient control over access to sensitive information technology areas. The audit highlighted several deficiencies, including incomplete emergency response plans, inadequate documentation of incident response activities, and insufficient training for IT employees on contingency planning. The university's chief of staff, Ryan Quigley, stated that corrective actions have been implemented since President Karim Ismaili took office in July 2024. ECSU has introduced a new electronic door access system to enhance physical security and oversight, and plans to conduct regular access reviews. The audit also noted the absence of maintenance logs for IT equipment, which the university has agreed to address.