Larger research projects with heavy data needs may have the resources to exercise more autonomy. But even so, it is imperative that such projects put a qualified person in charge of cybersecurity who can take sole responsibility for keeping up with the fast-moving requirements that security issues present.Large group or small, the ultimate responsibility for protecting data and other resources has to rest with the laboratories that own them. Every lab director must be aware of the risks, and must treat cybersecurity with the same respect as laboratory safety, patient safety and scientific integrity.
Main idea: The handling and protection of data should not be the universities' responsibility but the researchers responsibility. What I think: What researchers should do is store important data in external storage devices away from internet access and create copies to send to college or university via secure web.