Inside Arizona’s Efforts to Modernize and Secure Campus IT Systems

The University of Arizona is engaging in a significant overhaul of its IT infrastructure, aimed at enhancing both modernization and security across its campus. CIO Elliott Cheu highlights the importance of centralizing the previously fragmented IT systems and unifying core platforms to effectively support teaching, research, and administrative functions.

This modernization strategy builds upon critical changes implemented in 2024 and 2025, which saw the university expand its central IT workforce from approximately 350 to nearly 1,000 personnel. A strategic focal point of this initiative includes a comprehensive email migration, consolidating over 200,000 student and alumni Gmail accounts into Outlook, a move designed to strengthen security measures and streamline user experience.

Cheu noted that the primary success metric was enhancing security, particularly through the reduction of phishing threats. This migration enabled greater collaboration, minimized redundancy across systems, and delivered cost efficiencies. However, the university faced an initial rise in phishing attempts during the migration period, highlighting a predictable risk window that adversaries sought to exploit. To counter these threats, the institution implemented a multi-faceted defensive strategy.

In addition to email consolidation, the university is actively working to simplify operational complexities. This effort includes the unification of collaboration and identity systems, along with centralized ticketing and renewed governance structures. The shift aims to diminish Active Directory fragmentation while standardizing support via a 24/7 help desk and a singular enterprise ticketing system.

In a recent interview with Information Security Media Group, Cheu elaborated on several key initiatives. These include the centralization of endpoint management and core infrastructure, which bolster security and visibility across a large campus environment. He also discussed the introduction of mobile credentials and Near Field Communication (NFC) upgrades, which enhance the security and flexibility of digital identity experiences for students and staff.

Furthermore, the university is enhancing its research computing capabilities, ensuring compliance with regulatory standards, and making significant strides toward achieving Cybersecurity Maturity Model Certification (CMMC) Level 2. Cheu oversees the central IT organization, driving modernization, cybersecurity, and governance initiatives that are critical to supporting the entire campus community.

This systematic approach to IT modernization not only addresses immediate security concerns but also establishes a robust framework for the University of Arizona to adapt to future technological advancements, emphasizing the critical role of cybersecurity in higher education.