Is your school system data at risk? What you need to know about Cyber Security and Education
Is your school system data at risk? What you need to know about Cyber Security and Education Datalink Networks Sep 3, 2020·4 min read

Did you know that between 2018–2019 there has been a dramatic increase of publicly disclosed cyber security incidents of up to 300% ? In fact, according to K-12 Cyber Security Resource Center, the misuse and abuse of school technology and IT systems resulted in 348 publicly disclosed incidents involving 336 educational agencies across 44 states. With virtual learning, schools and districts must now be more vigilant on obtaining the proper cyber security tools and establishing up-to-date protocols and security policies.

Why is there an increase in Information Security Incidents?

Greater reliance on technology- With remote learning becoming the new normal, the reliance placed on technology has increased among faculty and students. This said, schools should place more of an emphasis on cyber security training to spotlight top threats. Schools are a big target for cyber criminals- With confidential databases of student and faculty information, schools have always been a huge target for cyber criminals. According to the Childrens Internet Protection Act educational institutions must ensure that sensitive data is properly protected to prevent these types of targets. Significant vendor security incidents- It is critically important to have clear cyber security standards for school vendors and other third party practices. As you will read in the next section breaches and unauthorized disclosures account for nearly 60% of K-12 cyber incidents. Greater public awareness and reporting — Teaching students and faculty how to stay safe online has quickly become more than just a compliance requirement. It is critical to create a greater cyber security awareness and reporting program to protect educational institutions against the security threats.

The Makeup of K-12 Cyber Incidents

Given the lack of attention to cyber security training, lack of awareness from faculty, staff, students can be a major threat to a school’s network. . The types of cyber incidents and threats that can target a K-12 school vary from ordinary spams emails to complex account takeovers . Schools should be aware of the following threats:

Breach or Unauthorized Disclosure- In 2019, most publicly disclosed data breaches were caused by parties that were known to and already part of the school community. When it comes to unauthorized disclosure, the top two profiles to watch include (1) current and former K-12 staff (2) Vendors/Partners with access to data and relationship to school district.

In 2019, most publicly disclosed data breaches were caused by parties that were known to and already part of the school community. When it comes to unauthorized disclosure, the top two profiles to watch include (1) current and former K-12 staff (2) Vendors/Partners with access to data and relationship to school district. Malware- A form of software specifically designed to cause damage to technical assets or gain access to a remote system. This type of threat is usually distributed through email attachments or URLs leading to malicious content.

A form of software specifically designed to cause damage to technical assets or gain access to a remote system. This type of threat is usually distributed through email attachments or URLs leading to malicious content. Ransomware- A form of malware that works to encrypt a users files. Once this is done, hackers then demand a financial ransom from the victim before restoring access to data. If a school system becomes a victim of ransomware, not only will the schools system be shut down for weeks, but the overall cost of data recovery can run into the millions of dollars.

A form of malware that works to encrypt a users files. Once this is done, hackers then demand a financial ransom from the victim before restoring access to data. If a school system becomes a victim of ransomware, not only will the schools system be shut down for weeks, but the overall cost of data recovery can run into the millions of dollars. Phishing — A tactic that uses fraudulent emails to gain confidential information such as network credentials and passwords, from users. Phishing cal also include installing malicious software through fraudulent downloads and attachments.

Key Takeaways
['Datalink Networks']
['Information Technology', 'Information Security', 'Educational Technology', 'Cybersecurity', 'Education']