The Tennessee Board of Regents (TBR) operates the state's largest public higher education system, governing 36 institutions - 13 community colleges and 23 Colleges of Applied Technology - that serve nearly 140,000 students annually. Established in 1972 by the Tennessee General Assembly, TBR coordinates policy, programs, and partnerships across every Tennessee community, managing more than 400 programs of study that span technical certificates, workforce credentials, and degree pathways. The system's scope means it touches critical infrastructure for statewide workforce development, from short-term credentials that can be completed in 12 months to comprehensive transfer articulation between institutions.
The threat surface here is substantial: 36 distributed campuses processing enrollment data, financial aid systems, academic records, and credential verification for nearly 140,000 students create a complex attack landscape. TBR's technical domains include higher education governance, workforce development, technical and vocational education, certificate and credential program delivery, academic degree pathways and transfer articulation, and policy coordination and system administration. Each institution in the system maintains its own operational technology while connecting to central governance infrastructure, requiring security architecture that scales across vastly different technical maturity levels - from community colleges to specialized technical training facilities.
Under CEO Flora Tydings, TBR functions as a unified system focused on expanding educational access and driving economic growth through workforce readiness programs aligned with industry needs. The organization's emphasis on student success and workforce development means security operations must protect not just academic continuity but also the technical training pipelines that feed Tennessee's employers. Anyone working security in this environment deals with regulatory compliance across higher education mandates, student privacy protections, and the operational reality of defending distributed systems where each campus may run different vendors, legacy platforms, and locally managed IT infrastructure.
