Academic institutions have a unique set of characteristics that makes them attractive to bad actors. What's the right antidote to cyber-risk?