AI-Augmented Identity-Centric Threat Governance for Public Universities under NIS2

Key Points

• The research aims to establish a comprehensive governance framework for identity-centric threat management in public universities under NIS2 regulations.
• Developed an identity-based threat model for Microsoft 365 environments.
• Conducted a regulatory gap analysis against AgID baseline controls.
• Proposed a governance prototype based on a locally deployed RAG model.
• Identified gaps in existing regulatory frameworks affecting public universities.
• Proposed actionable solutions tailored for resource-constrained institutions.
• Demonstrated the prototype's applicability in enhancing threat governance.