school safety week 2024
Cybersecurity in SchoolsAs schools become more reliant on digital technology for education, communication, and administration, cybersecurity has emerged as a critical issue. The consequences of a cyberattack on a school can be far-reaching, exposing sensitive data, disrupting learning, and potentially putting students and staff at risk. As a School Safety Professional, I have seen firsthand how schools can be vulnerable to online threats, and the importance of building a strong cybersecurity foundation cannot be overstated.
The Urgency of Cybersecurity in School Safety
According to the K-12 Cybersecurity Resource Center, there were 408 reported cyber incidents in U.S. schools in 2022, marking a 21% increase from previous years. This includes data breaches, ransomware attacks, and phishing scams targeting schools’ vulnerable digital infrastructure.
Schools store a vast amount of personal and financial data on students, teachers, and parents, making them attractive targets for cybercriminals. Compromised data can lead to identity theft, financial losses, and breaches of privacy. Further, disruptions caused by ransomware attacks can halt learning, delay assessments, and cause long-term operational challenges.
Common Cybersecurity Threats in Schools
Studies have consistently shown that the presence of surveillance cameras acts as a powerful deterrent to both internal and external threats. According to a report by the National Center for Education Statistics (NCES), more than 80% of public schools in the U.S. utilize surveillance cameras, which have contributed to a reduction in incidents of violence, theft, and vandalism.
Ransomware
One of the most devastating threats to schools, ransomware attacks can encrypt vital school data, effectively holding it hostage until a ransom is paid. Many schools have fallen victim, including the Baltimore County Public Schools in 2020, where a ransomware attack shut down online classes for over 115,000 students and halted operations for several weeks, costing around $9.7 million in recovery efforts.
TIP:
Schools should regularly back up their data to an offsite location or a cloud-based system. Having a recent backup ensures that data can be restored without paying the ransom.
phishing attacks
Phishing scams are deceptive emails designed to trick users into sharing sensitive information or clicking malicious links. These scams can target both staff and students, compromising login credentials and personal data.
Schools should conduct regular cybersecurity awareness training to teach staff and students how to identify phishing emails. Simple techniques, like verifying the sender’s email address or avoiding suspicious links, can significantly reduce the risk of falling victim to a phishing scam.
Data breaches
Data breaches occur when unauthorized individuals gain access to sensitive information, such as student records or staff personnel files. This can lead to identity theft and other forms of fraud.
Data revealed in a 2020 Clark County School District breach included names, dates of birth, ethnicities, medical information, financial information, student behavioral information, cyberbullying information, student records, employee records, and health insurance information. Parents later sued the District.
TIP:
Schools should implement multi-factor authentication (MFA) for accessing sensitive systems. This adds an extra layer of security beyond a password, ensuring that only authorized users can access critical data.
DDoS Attacks
Distributed Denial-of-Service (DDoS) attacks flood a network with traffic, causing disruptions to online services. These attacks are particularly disruptive to schools during online learning, as they can shut down virtual classrooms, online assessments, and other essential services.
TIP:
Schools should work with their Internet Service Providers (ISPs) to implement DDoS protection services that can detect and mitigate these attacks before they disrupt operations.
tips for school administrators
Implement a Comprehensive Cybersecurity Framework
School administrators must develop a holistic cybersecurity strategy that includes regular risk assessments, system audits, and adherence to security protocols. Following the guidelines outlined by the Cybersecurity and Infrastructure Security Agency (CISA), schools should adopt a layered approach, ensuring that firewalls, intrusion detection systems, and endpoint protection are all in place.
Back-up Data and Develop a Recovery Plan
Regularly backing up critical school data and developing a disaster recovery plan is essential for minimizing the damage caused by ransomware or other cyberattacks. Schools should create encrypted backups and store them offsite or in the cloud, ensuring that data can be restored quickly in the event of an attack. This reduces the need to pay ransoms to cybercriminals and allows schools to regain control of their systems without unnecessary delays.
Remain Compliant
Ensure that your school’s data policies are fully compliant with Family Educational Rights and Privacy Act (FERPA) and Children’s Online Privacy Protection Act (COPPA). Schools must regularly review and update their data privacy policies, limit access to sensitive information, and provide training for staff on proper data handling practices. Schools should also evaluate third-party software and apps used in the classroom to ensure they comply with privacy regulations.
tips for school resource officers
Monitor for Insider Threats
School Resource Officers (SROs) should collaborate with IT departments to monitor potential insider threats—such as staff members or students who might misuse their access privileges. By tracking unusual patterns in network activity, schools can detect insider threats early and take preventive measures.
Aid in the Development of and Practice Cyber Incident Response Plans
SROs should be involved in developing a comprehensive cyber incident response plan, which outlines the roles and responsibilities of school personnel in the event of a cyberattack. This plan should be tested regularly through drills and tabletop exercises to ensure all staff members know how to respond effectively in case of an incident.
tips for educators
Cybersecurity Awareness and Training
Educators are often the first line of defense against phishing and other social engineering attacks. Providing regular cybersecurity awareness training to teachers and staff can significantly reduce the risk of falling victim to phishing scams. Training should include how to identify suspicious emails, proper password management, and reporting procedures for suspected cyber incidents.
Secure Virtual Learning Platforms
With the rise of remote learning, it is crucial to secure virtual learning platforms. Teachers should ensure they are using school-approved, secure platforms for video conferencing, assessments, and communication with students. Platforms like Google Classroom and Microsoft Teams for Education offer built-in security features that help protect against unauthorized access and data breaches.
important information from cisa
On September 26, 2024 CISA released the Anonymous Threat Response Guidance and Toolkit for K-12 Schools:
The Cybersecurity and Infrastructure Security Agency (CISA) released the Anonymized Threat Response Guidance: A Toolkit for K-12 Schools, a new resource to help kindergarten through grade 12 (K-12) schools and their law enforcement and community partners create tailored approaches to addressing anonymous threats of violence, including those received on social media. The toolkit outlines steps school leaders can take to assess and respond to anonymous threats, better prepare for and prevent future threats, and work in coordination with law enforcement and other local partners when threats arise. It is co-sealed with the Federal Bureau of Investigation (FBI), which provided expert feedback on the toolkit’s key principles and strategies.
Social media-based and other types of anonymous threats of violence against K-12 institutions are common. These threats can erode trust that schools are safe places, contribute to losses in learning and instruction time, overwhelm school and law enforcement resources and have lasting psychological impacts on school communities.
The K-12 Anonymized Threat Response Guidance was developed to provide K-12 stakeholders with information to both protect school communities and limit the disruption and trauma that can be caused by anonymous threats. By providing guidance to inform decision-making about the urgency and credibility of individual threats, school and public safety leaders may be able to more effectively balance the full range of risks faced by K-12 organizations.
The toolkit emphasizes six key strategies for schools to consider when addressing anonymous threats:
- Build awareness about reporting to detect threats early and deter future threats.
Develop a partnership structure that will help address threats. This includes school administrators, law enforcement personnel and mental health professionals. - Engage law enforcement to manage threat situations and decide when to scale response actions up or down.
- Balance initial response steps to ensure the campus is safe. Most critically, treat each threat as credible, and from there, work with necessary partners to determine how to approach an immediate response.
- When appropriate, tap into multidisciplinary threat assessment teams to support interventions and expedite response if the subject who made the threat becomes known.
- Take steps throughout the school year to prepare for threats. Establish a response protocol and practice other types of emergency management activities, such as training exercises for staff.
The release also includes a supplemental reference guide that provides streamlined information for K-12 stakeholders to understand and utilize some of the best practices from the full toolkit. Both products were developed to support the diverse range of K-12 school settings across the United States and are based on current practices of K-12 organizations and law enforcement agencies.
The new toolkit and guide were announced at CISA’s 2024 National Summit on K-12 School Safety and Security, an annual event that brings together K-12 school leaders and practitioners to discuss and share actionable recommendations that enhance safe and supportive learning environments.
To learn more and access the K-12 Anonymized Threat Response Guidance, please visit cisa.gov/resources-tools/resources/k-12-anonymized-threat-response-guidance.
In today’s digital age, cybersecurity is a non-negotiable aspect of school safety. Cyberattacks like ransomware, phishing, and data breaches pose serious threats to the functioning of schools and the privacy of students and staff. School administrators, educators, and resource officers must work together to implement robust cybersecurity measures, from securing virtual learning platforms to developing incident response plans. By adopting best practices, providing ongoing training, and staying informed about emerging threats, schools can create a safer digital environment for all.
Want to Test Drive the MERP for free?
