{"id":15811,"date":"2022-10-24T11:11:23","date_gmt":"2022-10-24T09:11:23","guid":{"rendered":"https:\/\/blogs.sun.ac.za\/it\/?p=15811"},"modified":"2022-10-24T20:13:51","modified_gmt":"2022-10-24T18:13:51","slug":"su-takes-great-leap-forward-into-cloud-era","status":"publish","type":"post","link":"https:\/\/blogs.sun.ac.za\/it\/2022\/10\/su-takes-great-leap-forward-into-cloud-era\/","title":{"rendered":"[:en]SU takes great leap forward into cloud era[:]"},"content":{"rendered":"

[:en]<\/p>\n

\"hand<\/p>\n

Stellenbosch University is currently in the process of taking a \u201cgreat leap forward\u201d into the \u201ccloud\u201d era, which will see the new finance and student systems, SUNFin and SUNStudent, operating in the cloud.<\/p>\n

This is not only going to make all the difference to security against cyber threats but will also make the university\u2019s systems more efficient and accessible, in a number of ways, for students and staff. The move into the cloud, which is the culmination of years of work, will take SU into an entirely different risk profile, said Marc-Allen Johnson, acting director IT Institutional Software Systems at SU.<\/p>\n

\"\"<\/p>\n

\u201cThis is a big step in the right direction, as the threat of cyber fraud at universities is growing all the time, all over the world,\u201d Mr Johnson said in an interview. To date, most of the university\u2019s administrative systems have been housed on premises, in a data centre on campus. \u201cBut now they will be housed in the cloud, running in data centres in Johannesburg and Cape Town, and according to the latest standards in technology, to ensure that the personal information of both students and staff remains secure,\u201d Mr Johnson said.<\/p>\n

\u201cAt the same time, once fully operational, it will be possible to access the systems from anywhere without having to be affected by loadshedding or interrupted internet connectivity on the Stellenbosch campus. So, we are providing a much-improved service, while ensuring a secure system.\u201d<\/p>\n

Elaborating on the two new systems, SUNFin and SUNStudent, Mr Johnson said SUNFin refers to the university\u2019s new financial system. \u201cIt is an Enterprise Resource Planning (ERP) system that SU will use to manage day-to-day business activities of the Finance capability within the organisation. It manages all the key financial requirements that a university has to fulfil to ensure that the books balance, that people get paid and that we manage our finances well. The implementation of the SUNFin project has been under way for the last two to three years.\u201d<\/p>\n

\u201cSUNStudent refers to the new system that supports the Student Administration capability and all the related student services. The SUNStudent system will usher in a modern, integrated and cloud-based solution that will allow key university capabilities like Registration, Bursary Awards, Assessment and Degree Audits to be supported in a secure way.\u00a0Although the staff and students have always had access to self-service functionality, the modernised interface provides it all levels.\u00a0The new Application and Admission process went live in 2021 and facilitated a significant jump in the number of applicants and demographic.\u201d<\/p>\n

Mr Johnson said the university is planning to be fully operational with both systems by the end of next year. The application and admissions functionality of SUNStudent have already been live for two years.<\/p>\n

He said that, for the IT team at the university, the new moves address \u201cquite a few risks\u201d. \u201cWe have legacy administrative systems of between 20 and 30 years old at the university. Through the years, the demands on these systems have been continuously growing and the world continues to throw security challenges our way. We\u2019ve responded by making changes ourselves, but the technical debt has grown untenable over the years. Coupled with a technology that the industry is not actively pursuing anymore and people who have been part of building these systems retiring, it was necessary to make a leap.<\/p>\n

\"\"<\/p>\n

\u201cSo, it is a great relief for me to see us moving into a new era where we are implementing software solutions that will last another 30 years. It is also exciting to know that, from now on, our system will be continuously improving and remain up to date.\u201d<\/p>\n

Part of the improved efficiency, he said, was the fact that the IT Division will work in close partnership with vendors like Oracle and Serosoft \u201cto ensure that we have security by design\u201d.<\/p>\n

\u201cWe also know that we are not their only client, which means that we benefit from the collective. For instance, if they implement enhanced security measures, or conduct vulnerability tests for one client, they implement it for all of us. That is one of the benefits of going to the cloud \u2013the vendor takes responsibility to keep the system up to date and secure according to a contract.\u201d<\/p>\n

Mr Johnson said that in the past many institutions bought software \u201coff the shelves from a vendor\u201d and then tried to maintain their systems themselves.<\/p>\n

\u201cBut then they fall behind the latest versions and patches which opens them up to security risks. By moving to the cloud, Stellenbosch University will receive regular updates and be assisted regularly, and we will not fall behind as new functionalities are released.\u201d<\/p>\n

Mr Johnson said that the mechanisms implemented by the new systems will be a great deterrent to the ever-present cybersecurity threats.<\/p>\n

\"\"<\/p>\n

\u201cI recall a quote, often attributed to Thomas Jefferson, \u2013 \u201cThe price of freedom is eternal vigilance\u201d \u2013 and it really rings true. With these new systems, we have invested in a solution that will continuously be kept up to date. Yes, along with the vendors, our team will have to be continuously vigilant, but it means newly discovered vulnerabilities will be quickly patched by our partners. We are contractually partnered with our vendors to provide that level of surety.\u201d<\/p>\n

Mr Johnson said once the system is up and running, \u201cwe will all sleep easier\u201d.<\/p>\n

\u201cAs the research shows, one of the most difficult IT challenges at any institution is to implement a new system. It involves a lot of change and the switchover from the one system to the other is a risk that can be easily exploited by people wanting to do harm.<\/p>\n

\u201cFor instance, if cyber criminals know that a new system is being implemented, they could send out an email to a student or staff member and invite them to click on a link to be \u201conboarded\u201d on the new system \u2013 potentially leading to compromised credentials. During this period of transition, we have to promote a heightened awareness and ensure we educate all students and staff about the risks. Our teams monitor and respond to phishing attacks like these that target our users. One of the measures that counter the reach of these attacks is to implement multi-factor authentication. For instance, when you log into the system, you receive a prompt to either supply a one-time PIN or approve the log in using a mobile app. For many staff and students, it feels like a burden, but that simple act is an important deterrent, because if someone gets hold of your username and password it makes it much harder to get past that hurdle.<\/p>\n

\u201cWe can try to put in place as many security measures as we can, but if the attacker manages to use phishing techniques to trick a student or staff member to disclose their username or password, it could give the attacker access to sensitive information. This is a critical threat to administrative systems and something we are obviously concerned about, hence measures like Multi-factor Authentication.\u201d<\/p>\n

\"\"<\/p>\n

Mr Johnson continued: \u201cSUNFin and SUNStudent will not only provide better functionality, to enable us to become a more modern and efficient university, but they will also make us more resilient to cyber-attacks. However, we really need everyone\u2019s help to be vigilant by educating oneself and being on the lookout for suspicious messages. All students and staff are encouraged to reach out to us if they have any doubts or queries about suspicious emails or notifications they receive. Our IT support desks and relationship managers are there to assist, especially during this transition period to final implementation of SUNFin and SUNStudent.\u201d<\/p>\n

[:]<\/p>\n","protected":false},"excerpt":{"rendered":"

[:en] Stellenbosch University is currently in the process of taking a \u201cgreat leap forward\u201d into the \u201ccloud\u201d era, which will see the new finance and student systems, SUNFin and SUNStudent, operating in the cloud. This is not only going to make all the difference to security against cyber threats but will also make the university\u2019s […]<\/p>\n","protected":false},"author":11479,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[49,3256],"tags":[],"class_list":["post-15811","post","type-post","status-publish","format-standard","hentry","category-general","category-news"],"publishpress_future_action":{"enabled":false,"date":"2026-05-22 04:59:17","action":"change-status","newStatus":"draft","terms":[],"taxonomy":"category","extraData":[]},"publishpress_future_workflow_manual_trigger":{"enabledWorkflows":[]},"_links":{"self":[{"href":"https:\/\/blogs.sun.ac.za\/it\/wp-json\/wp\/v2\/posts\/15811","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/blogs.sun.ac.za\/it\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blogs.sun.ac.za\/it\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blogs.sun.ac.za\/it\/wp-json\/wp\/v2\/users\/11479"}],"replies":[{"embeddable":true,"href":"https:\/\/blogs.sun.ac.za\/it\/wp-json\/wp\/v2\/comments?post=15811"}],"version-history":[{"count":17,"href":"https:\/\/blogs.sun.ac.za\/it\/wp-json\/wp\/v2\/posts\/15811\/revisions"}],"predecessor-version":[{"id":16051,"href":"https:\/\/blogs.sun.ac.za\/it\/wp-json\/wp\/v2\/posts\/15811\/revisions\/16051"}],"wp:attachment":[{"href":"https:\/\/blogs.sun.ac.za\/it\/wp-json\/wp\/v2\/media?parent=15811"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blogs.sun.ac.za\/it\/wp-json\/wp\/v2\/categories?post=15811"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blogs.sun.ac.za\/it\/wp-json\/wp\/v2\/tags?post=15811"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}