Universities: many departments, one posture

Higher ed is uniquely hard: a hospital, a payment processor, a research lab, and a 40,000-person identity directory under one roof. Each touches different data and different frameworks — FERPA, HIPAA, PCI DSS, GDPR for international students, grant security requirements.

Where the risk actually lives

• PHI in the campus health center and PCI data in dining services
• Research grants with their own security clauses
• Thousands of accounts across departments with inconsistent MFA
• International student data under GDPR

How Sightline fits

Sightline assesses against the NIST CSF spine once and crosswalks to every framework you carry, so each department sees its own scope while leadership sees the whole institution. Scope a role to a building, a department, or a single framework, and bring external auditors in read-only.

One assessment, every framework, every department — without standing up a separate program for each.