Open by mission. Resilient by design.

Australian universities hold some of the oldest and most complex IT environments outside government. Research databases, administrative systems, and library infrastructure built across multiple technology eras coexist with modern cloud platforms and SaaS tools. Integrating AI into this environment without visibility of underlying data flows creates risks. Those risks are difficult to map. They are slower to fix.

• Legacy research databases without modern access controls
• Federated identity systems that grant broad access by default
• Library and administrative systems with limited audit logging

As research commercialisation grows, the data inside universities is becoming materially more valuable to attackers. Defence research. AI training data. Industry-partnership IP. Indigenous data. All carry obligations that standard university infrastructure was not designed to meet.

• Defence research operating outside dedicated secure zones
• Indigenous data without sovereignty controls or community oversight
• Industry-partnership IP without contractual or technical protection

AI tools arrive in universities through procurement, individual academic adoption, vendor-embedded features in existing platforms, and student use. Few institutions have visibility of their full AI footprint, let alone the data flows that accompany it.

• AI use in research without ethics or data-handling review
• Academic and administrative AI tools outside the procurement perimeter
• Student-facing AI without alignment to academic integrity frameworks