Western Governors University operates the nation's largest nonprofit online university, running competency-based degree programs for over 300,000 working adults across all 50 states. The threat model is straightforward: protecting student records, financial data, and learning platform integrity at scale while maintaining always-on availability for asynchronous learners juggling work and school. The institution holds regional accreditation and manages programs in IT, healthcare, business, and education - domains that come with their own compliance surface areas including FERPA, payment card standards, and healthcare-adjacent data handling.
The infrastructure runs on a hybrid Oracle and AWS stack: Oracle Database with Exadata Cloud@Customer, PostgreSQL, MySQL, Microsoft SQL Server, Amazon RDS and Aurora, plus Oracle GoldenGate for replication and Oracle RAC for high availability. The platform also leverages Oracle Cloud Infrastructure alongside AWS, with QLIK handling analytics. Security teams work across on-prem Oracle environments and cloud services, managing database security posture, access controls, encryption at rest and in transit, and monitoring across a distributed architecture that supports continuous student access and flat-rate term enrollment cycles.
The competency-based model creates specific operational requirements: students advance through material at individual speeds, meaning the platform needs persistent uptime and secure access to assessment engines, faculty mentorship tools, and credential verification systems. Security work includes protecting PII for hundreds of thousands of active students, securing APIs between learning management components, monitoring for account takeover attempts, and maintaining audit trails for accreditation review. The scale is enterprise-level higher ed infrastructure with nonprofit constraints and a student population that expects 24/7 platform availability.
