A few years ago, cybersecurity wasn’t a major concern for small business owner Brooks Woodward. His business, Nichols Lures in Thomasville, operated with a small team where a data loss or system breach would’ve been inconvenient but manageable. Today, the business is significantly larger and more reliant on its digital infrastructure—like websites, inventory systems and social media channels—so a cyberattack could result in major disruptions and serious financial costs. Protecting those resources has become crucial.

“The thought of somehow losing control of those assets is pretty scary,” says Woodward.

Thanks to a partnership with the University of Georgia, Woodward is feeling more secure.

In early 2024, Woodward participated in the UGA CyberArch program, where he learned how much more vulnerable the digital side of his business had become and made security a much greater priority. CyberArch helped Woodward immediately implement best practices and other measures to strengthen the cybersecurity posture of his business.

CyberArch, a program run by the UGA Carl Vinson Institute of Government, one of the eight units of UGA Public Service and Outreach, supports community partners in increasing cybersecurity awareness and improving their ability to prevent and respond to cyber threats. UGA student interns, who major subjects ranging from computer programing to management information systems and cybersecurity, are grouped in teams of four and conduct structured cybersecurity risk assessments that begin with an initial review and culminate in on-site evaluations. They then provide detailed final reports with customized recommendations to enhance each partner’s cybersecurity posture.

CyberArch serves a diverse range of statewide partners, including K-12 school districts, local governments, rural hospitals, and small businesses, often working in coordination with the UGA Small Business Development Center (SBDC), another unit of Public Service and Outreach. These comprehensive cybersecurity services are provided at no cost to partner organizations.

“The UGA CyberArch program exemplifies the University of Georgia’s commitment of service to the state as its flagship land-grant and sea-grant institution,” said Mark Lupo, program coordinator. “UGA is strengthening the cybersecurity infrastructure across Georgia by raising the cybersecurity readiness of our partner organizations and creating lasting impact for communities.”

Through the program, UGA students gain valuable workforce experience conducting the cybersecurity risk reviews. With seven CyberArch teams working over a semester, the reviews provide approximately $70,000 to $210,000 of total value to the partner organizations.

CyberArch’s capacity expanded thanks to a $500,000 grant from Google, which helped support 36 interns for the 2024-25 academic year. A recent $250,000 gift from Craig Newmark Philanthropies will further enhance the program’s growth and impact.

Woodward’s engagement with CyberArch was initiated through Alyssa Foskey, area director and business consultant for the UGA SBDC at Valdosta State University. Foskey had previously helped the company with accounting and marketing support. When she recommended the CyberArch, Woodward jumped at the chance—and found the experience to be practical, efficient and respectful of his time.

One of Woodward’s biggest takeaways was a shift in thinking about risk. Previously, he thought ransomware and outside attacks were the main threats. But CyberArch helped him recognize that internal risks—mistakes or vulnerabilities within his own team—posed the most immediate danger. The insights helped Woodward look at cybersecurity differently—more about what makes sense for his business. For starters, he changed password protocols, moved away from Google’s password keeper and started adding policies into the employee handbook.

“These were small changes, but they made us feel more secure right away,” Woodward says.

The support from UGA saved Woodward thousands of dollars in upfront consulting costs, and the other recommendations are providing $200 a month in savings.

“It’s fantastic that the University of Georgia uses student talent to support local businesses. The work certainly would have been unaffordable for us, so accessing their expertise through CyberArch was a huge benefit,” says Woodward. “As a Georgia taxpayer, it’s meaningful to see our dollars at work through the University of Georgia, which then uses its resources to help our businesses and communities thrive.”

Jarrod Brogdon, director of network services for the Colquitt County School District, worked with CyberArch in 2022 to address vulnerabilities across the district’s systems. Brogdon learned about the program from Sarah Adams, then the Colquitt County Archway Partnership Professional. Archway is another unit of Public Service and Outreach.

That initial insight became the foundation for a robust cybersecurity strategy. With guidance from the CyberArch team, Brogdon developed a comprehensive written cybersecurity plan and a formal incident response plan—two crucial components that have helped Colquitt County enhance its preparation.

“Thanks to CyberArch, we’re preparing for the kind of threats that could seriously impact our systems and student services,” says Brogdon.

Last fall, the district held its first full-scale cybersecurity drill, including a roundtable discussion based on a real-world scenario, as part of a broader effort to strengthen awareness and readiness across staff and administration. In February, Brogdon shared his experience as part of a presentation by a team of CyberArch interns at the National K-12 Cybersecurity Leadership Conference in Savannah.

Brogdon says that the potential impact of a cyberattack—downtime, loss of data and damage to the district’s reputation—keeps cybersecurity a top priority. Plus, the support from CyberArch came at no cost. Brogdon said hiring an outside firm would have cost the district, which includes 14 schools, at least $50,000. “I just can’t stress enough the value of the program,” he says. “I’m always happy to be a spokesperson for UGA CyberArch because of the value it brought to our district and what we’ve been able to accomplish since, since going through that process.”