&gt; If this is true, there&#x27;s absolutely no reason why Berkeley can&#x27;t hire competent infosec folks to handle it all internally, especially considering they have a lot of smart students in the field.<p>University IT tends to be super fragmented with each department having their own IT. It was probably a lot simpler to contract it out than try and build a central org... and infosec people ain&#x27;t cheap these days.