Brad Judy, the Chief Information Security Officer (CISO) at the University of Colorado (CU), shared his insights on cybersecurity as the university marks Cybersecurity Awareness Month in October. Judy, who has been with CU for over 25 years, spoke about his role and current challenges facing cybersecurity.
Judy emphasized that much of CU’s cybersecurity work happens at the campus level. “The majority of cybersecurity work at CU is happening on the campuses, so a big part of my job is doing whatever I can to support the campus cybersecurity teams and make their jobs easier. That includes achieving efficiencies on the tools they use and aggregating licenses to lower costs. My team also develops many of the campuses’ training and educational tools,” he said.
He also discussed how artificial intelligence (AI) is impacting both defenders and attackers in cyberspace. “Many people are turning to AI to make their jobs easier and their work more efficient, including cybercriminals. Just as we’re seeing AI being introduced to cybersecurity tools to add efficiencies, we’re also seeing criminals use AI to create phishing messages and write code for cyberattacks. Criminals are using AI for the same reasons so many of us use AI: They’re trying to make their lives easier and spend fewer hours working,” Judy explained.
Judy noted that CU’s security teams are working to ensure safe use of AI across the university by helping staff understand how these tools operate, what data can be safely shared, and which business functions should depend on them.
On keeping up with evolving threats, Judy highlighted collaboration within higher education and staying informed through multiple sources. “Like any field that moves fast, it’s a challenge to stay on top of things in cybersecurity, and it requires us to be informed about many other issues as well, including the broader news. We’re affected by global politics and shifts in business. You can wake up one morning and some national or global event changes your entire workday,” he said.
He added: “One of the things we ask candidates when they apply for cybersecurity positions at CU is how they stay informed. There’s no shortage of tech communication sources, including various websites, Mastodon, social media and countless others, and we use a wide variety. We also rely on each other because there’s so much information out there. We’re more than happy to share with each other. We have great teams, great people with an immense amount of experience and a lot of new ideas.”
Judy pointed out that sharing knowledge with peers from other institutions helps address common challenges in higher education security.
When asked about simple steps everyone can take online, Judy recommended trusting instincts: “The biggest thing is to listen to your gut. If something seems off, don’t be afraid to ask about it. If you get an email from your boss, but it doesn’t sound like your boss, call or text them to confirm they sent it… It’s better to ask the question than to fall for something.” He stressed that everyone has a role in protecting information at CU.
Outside work, Judy enjoys creative projects such as restoring antique furniture or building unique items like a lamp from an old television set. He appreciates Colorado’s diverse offerings from sports teams and museums to outdoor activities and music venues.
Additional resources related to Cybersecurity Awareness Month at CU—including webinars—are available at www.cu.edu/cam.
