Education institutions, just like any business or organization, need to pay careful attention to their cybersecurity posture and that of the third parties they work with.