Information security and the protection of critical information and telecommunication infrastructure elements are becoming the most important factors for the successful implementation of the digital transformation tasks of universities. Vulnerabilities in the digital environment can lead to leakage of confidential data, disruption of the educational process, and loss of confidence in digital technologies. Such information security incidents not only cause direct damage to educational institutions, but also undermine the innovative and technological potential of the country, weakening its position in the global scientific and technological competition. The human factor and the lack of information security skills significantly increase the likelihood of information security incidents. At the same time, the following risks are observed: insufficient training and awareness of university staff and students about modern methods of cyber attacks, social engineering, cybercrime, and lack of information security culture and disregard of basic rules of working with information create favorable conditions for intruders. Creation of information security culture, systematic training and regular professional development of university staff and students are the most necessary measures to reduce information security risks and ensure reliable data protection.