As institutions expand their digital footprint, cybersecurity has become essential to ensuring trust, protecting data and enabling seamless learner experiences. At the same time, it is evolving beyond compliance to play a central role in driving institutional strategy, supporting innovation and building long-term resilience in an increasingly complex threat landscape. In this interview, Calvin Nobles discusses how cybersecurity underpins a secure and trusted digital learner experience, and the shift to position it as a strategic driver of innovation, resilience and workforce development.
The EvoLLLution (Evo): As institutions evolve in this increasingly digital world, where does cybersecurity fit in shaping a secure and trusted learner experience?
Calvin Nobles (CN): Cybersecurity isn’t a layer we add on. It’s the foundation of a trusted digital learning experience. At institutions like University of Maryland Global Campus, every learner interaction—from enrollment to AI-enabled tools—operates within a secure, integrated ecosystem. That trust is built on seamless identity assurance, ensuring students can access systems without friction while maintaining strong protections.
Equally critical is data integrity and privacy. Students are entrusting institutions with highly sensitive personal and academic information. Protecting that data at the highest level isn’t just a technical requirement. It’s central to building confidence and long-term engagement. In a digital-first environment, cybersecurity directly shapes the learner experience. When done right, it’s invisible, but it underpins everything, enabling institutions to deliver secure, reliable and personalized journeys at scale.
Evo: What does it look like to elevate cybersecurity from serving a compliance function into a strategic institutional differentiator?
CN: Elevating cybersecurity starts with shifting the mindset—from a compliance checklist to a true institutional capability. Frameworks are important, but real impact comes when security is embedded across academics, research and operations. It becomes part of how the institution functions, not just how it protects.
Next, cybersecurity has to move from a cost center to a value driver. When it enables innovation—AI, cloud, virtual labs—it expands experiential learning, attracts partnerships and funding, and strengthens institutional trust. That’s where it starts to differentiate.
Finally, it can’t live solely within IT. Cybersecurity is an enterprise strategy. For digital-first institutions, resilience and uptime are mission-critical. When students can rely on continuous, secure access, that trust becomes part of the institution’s brand and a key driver of learner engagement and success.
Evo: How can performance excellence frameworks strengthen the institution’s ability to respond to evolving cyber threats?
CN: Frameworks give institutions a shared foundation, but their real value is how they drive systems thinking. Cybersecurity isn’t isolated. Every person and process can be a potential entry point, so resilience depends on awareness, communication and coordinated response across the institution.
They also enable measurement and continuous improvement. With rising investment in cybersecurity, institutions need to reduce risk, improve efficiency and ensure programs are maturing, not just expanding.
Finally, frameworks align leadership, governance and workforce enablement. When cybersecurity becomes an enterprise-wide responsibility, supported by training and culture, institutions can operate more securely and confidently at the scale their digital footprint demands.
Evo: How can institutions really design a secure digital environment without ever compromising the learner?
CN: Designing a secure digital environment starts with rejecting the idea that security and experience are trade-offs. The goal is balance—where protection is strong, but access remains seamless for learners. That comes down to precision. Principles like least privilege ensure students, faculty and staff only access what they need—nothing more, nothing less. When done right, it protects users without adding friction, while limiting risk from unnecessary exposure.
Layering in best practices like multi-factor authentication and clear access controls reinforces that balance. And just as important, institutions need to communicate this to learners. When students understand that security is intentional, measured and built around protecting their experience, it strengthens trust without compromising usability.
Evo: How can institutions better align the cybersecurity, workforce development and institutional strategic priorities to build long-term resilience?
CN: Cybersecurity has to be viewed as a long-term talent engine, not a one-time investment. Institutions build resilience by embedding real-world capabilities—cyber ranges, threat labs, security operations—directly into the learning ecosystem to allow students to develop skills that align with workforce demands. That alignment strengthens when institutions connect to established frameworks like NICE and map roles across the enterprise. It creates clarity on how academic programs, institutional needs and career pathways all intersect.
Finally, partnerships are critical. Collaborating with government, industry and community organizations extends impact beyond campus—building pipelines, strengthening communities and reinforcing the institution’s role as both a workforce driver and a trusted digital leader.
Evo: Is there anything you’d like to add?
CN: Cybersecurity is evolving rapidly, especially in the age of artificial intelligence. AI is accelerating innovation, but it’s also empowering adversaries, making threats more sophisticated and harder to detect. Even something as simple as identifying a phishing email now requires more awareness and intentional decision making, reinforcing how critical individual judgment has become across the institution.
That’s why institutions have to level up, not just in technology but in talent. Preparing the next generation of cybersecurity professionals to navigate this landscape is essential. When institutions commit to continuous learning, stronger awareness and more adaptive strategies, they position themselves to stay resilient in an increasingly complex and high-stakes digital environment.