IE 11 Not Supported

For optimal browsing, we recommend Chrome, Firefox or Safari browsers.

Heartland Community College Investing in Cyber Improvements

Hardening its network after a cyber attack in fall 2020, the Illinois college is investing in more network surveillance, a firewall review, off-site and air-gap backups, server updates and other measures.

Heartland Community College.jpg
Heartland Community College, Normal, Ill.
Heartland Community College
(TNS) — Heartland Community College has spent almost a third of the $1 million that it dedicated to improving cybersecurity last June after a cyber attack in fall 2020.

Heartland Chief Information Officer Scott Bross updated the Heartland board of trustees Tuesday night on the changes since the funding was announced in June 2021.

"IT is doing great when you guys are not talking about IT, and you guys have not talked about IT in about a year," Bross said.

Many of the improvements focus on protections for the college's data center and backups. The attack prevented Heartland from accessing files, which shut down classes and took months to fully fix.

"That's one of the things they really attempt to do, is put down your ability to actually do business," Bross said.

Data center changes included adding more detection for unusual activity and a review of the college's firewall. Backup improvements include off-site backups and a move, in progress, to what is called "air-gap" backups, which are not connected to the institution's network.

Board documents show that the air-gap backup move, at about $243,000, has used a majority of the funds spent so far. Another $29,000 has gone toward backup software and $39,000 has gone toward penetration testing.

The college also is separating more of the widely accessed network from the parts of the network that hold important and valuable information, Bross said.

Even just implementing a better plan for patches and updates to servers can be important in preventing hackers from exploiting the system, he said.

"If they're not being updated, we can be attacked in just a brief window (...) this keeps us current, it keeps us in action," Bross said.

Heartland also is requiring multifactor authentication for employees. This is a trend far beyond education, he said, and is becoming a standard practice across Internet services. The multifactor addition is one of the more visible changes that employees encounter daily.

President Keith Cornille said the college also is continuing its education efforts for students and employees to improve the human element of cybersecurity.

Bross plans to implement yearly third-party penetration testing, in which the college hires experts who then try to hack into the system. This year the college gave the outside company a student login account.

The test did reveal some issues the college should address, but nothing drastic, Bross said.

BUDGET PLANS



Later at the meeting, the board heard plans for the tentative fiscal 2023 budget, with a public hearing set for Sept. 20 before the scheduled board meeting.

Heartland Controller Justin Knorr said the staff anticipates a balanced budget of around $37 million in the education fund and operations and maintenance fund.

The tentative budget assumes a 3.7-percent increase in property values and even enrollment from the fiscal 2022 budget. The board has previously approved a $3 per credit hour increase in tuition and a $2 per credit hour increase in student fees.

Expenses are expected to increase due to salary raises and rising costs generally, Knorr said. The balance of where funds are being spent, and where they are coming from, is expected to stay substantially the same as the 2022 budget.

After a closed session, the board approved a new collective bargaining agreement with the Heartland Faculty Association, which represents full-time faculty at the college. The agreement includes raises of 2.5 percent, 3 percent and 2.5 percent over the next three years, respectively. The contract is for three years.

"The HFA is committed to offering students quality educational experience, which can best occur when responsible compensation and supportive working conditions are provided for educational professionals," the union said in a statement sent out by the college after the meeting.

Part-time faculty are represented by a separate union.

In the same press release, HFA President Cherie Rankin said that the bargaining process included a salary study that led to one-time adjustments for most faculty, along with the scheduled raises.

HFA President Cherie Rankin told The Pantagraph that most items up for negotiation were decided "quickly and smoothly."

The last two years of teaching during the pandemic has shown a need for flexibility in instruction, Rankin said.

"During COVID, the value of flexibility — in terms of both location of work and student access to instructors — was clear. That flexibility will largely continue whenever possible," she said.

©2022 The Pantagraph (Bloomington, Ill.). Distributed by Tribune Content Agency, LLC.