The two staffers who have been suspended -- and now face possible termination pending a full investigation -- are the university's director of communication network services and the manager of Internet and systems.

Based on the recommendations of Moran Technology Consulting LLC, the Naperville, Ill.-based firm that performed the security audit, OU is also establishing "clear roles, responsibilities and accountabilities" for those working in its central IT organization, the statement said.

"The new organization will ensure that security is properly provided at both central and distributed levels and that all team members are focused on supporting the entire university and its stakeholders," the university said. It noted that more than 90 percent of its IT organization will be affected by the restructuring.

As part of its efforts, the university will also deploy real-time and scheduled measures for protecting its systems against viruses on every Windows-based server.