BC Auditor General finds VIU board fell short on cybersecurity risk management

A new report from the Auditor General of British Columbia found that Vancouver Island University’s board of governors is falling short in its oversight of cybersecurity risk management. The audit was conducted between April 2022 and March 2023 at VIU, which was selected because “it is a similar size to many other universities” in BC. VIU accepted the recommendations in the audit: Reviewing and approving governance and policy documents as scheduled, creating an annual development program, updating the board orientation program, and reviewing its cybersecurity risk mitigation strategies throughout the year. BC Auditor General Michael Pickup hopes that other boards will review the audit report and use it to do a self-assessment.