Home Cybersecurity
Category:

Cybersecurity

Stay informed on cybersecurity in education. Discover tips, tools, and strategies to protect schools, educators, and students online.

Cybersecurity

Building a Cybersecurity Culture 

by Mike Durando
written by Mike Durando

Texas schools are embracing technology like never before, opening doors to dynamic learning. Yet, this digital leap comes with a serious shadow: cyber threats. The education sector has become a top target for hackers, who exploit limited cybersecurity budgets to execute ransomware attacks, data breaches, and other intrusions. In 2023, K-12 schools saw a record-breaking surge in cyber incidents, with 954 breaches—nearly seven times the previous year’s number. The stakes couldn’t be higher. Beyond the immediate risks, cyber incidents can drain resources, interrupt learning, and jeopardize student privacy. For Texas schools, building a cybersecurity culture is essential, involving everyone from administrators to students. In doing so, schools not only protect themselves but empower students to become digital citizens who understand the importance of online safety. 

Tips for Building a Cybersecurity Culture

Creating a cybersecurity culture isn’t just about implementing the latest technology; it’s about fostering a community-wide commitment to digital safety. Here are five tips to help Texas schools build and sustain this culture: 

1. Implement Comprehensive Cybersecurity Training for Staff 

Regular training sessions are essential for keeping school staff updated on the latest threats and best practices. This training should cover everything from recognizing phishing attempts to understanding the importance of strong password management. By equipping educators and staff with the knowledge they need, schools can significantly reduce the risk of breaches. 

2. Engage Students in Cyber Awareness Programs

    Students are on the frontlines of technology use in schools. Engaging them in cybersecurity programs that teach them about safe online behavior, recognizing suspicious links, and the importance of not bypassing filters is crucial. Involving students and finding unique opportunities to engage and teach them not only empowers them but also helps schools create a culture where everyone plays a role in maintaining security. 

    3. Involve Parents and the Community

    Cybersecurity is not just an in-school issue; it extends to the home and beyond. Schools should engage parents and community members through workshops and resources that explain the importance of digital safety. By creating partnerships with families, schools can reinforce good habits and foster a community-wide commitment to online safety. 

    4. Establish Clear Policies and Protocols 

    Schools must have clear, accessible policies for handling technology and responding to incidents. This includes protocols for reporting suspicious activity, guidelines for accessing sensitive data, and a clear chain of command in case of a breach. By having well-defined policies, schools can respond quickly and effectively to any threats. 

    5. Leverage Technology to Monitor and Protect 

    Investing in robust cybersecurity solutions that offer real-time monitoring, filtering, and alert systems can make a significant difference. Technology should be used not just as a preventative measure but as a proactive tool for identifying and addressing potential risks before they escalate. 

    Example in Action: Grapevine-Colleyville ISD 

    Grapevine-Colleyville ISD (GCISD) is taking an innovative approach to cybersecurity. When GCISD faced the challenge of students attempting to bypass filters—a common issue in many districts that can lead directly to opening cybersecurity risks—GCISD launched the “Beat the Filter” challenge to turn what could have been a negative situation into a learning opportunity. 

    At the event, students came together with GCISD’s technology team and the Lightspeed Systems product and security teams to talk about cybersecurity and engage in an ethical hacking exercise where students shared their tactics for attempting to circumvent filtering. Kyle Berger, GCISD’s Chief Technology Officer, shared his perspective on turning cybersecurity training into a real-world activity: “It’s beyond just checking a box and making sure somebody watched a video or read some sort of paper or something in that nature. For us, cybersecurity training is real time throughout the year.” 

    By engaging students directly, GCISD created an interactive and educational experience that not only reinforced the importance of cybersecurity but also empowered students to take ownership of their digital actions. This proactive approach demonstrates how Texas districts can turn challenges into opportunities to strengthen their cybersecurity culture. 

    Watch the video to see more about the event. 

    Lightspeed Systems: Your Trusted Partner for Building a Cybersecurity Culture

    Funding can make cybersecurity an even greater challenge for districts, so districts need to work with partners who deliver protection with cost-saving insights. As Kyle says, “Nowadays many school districts are not having a lot of funding opportunities so we really have to look at how our money is being spent and how it’s actually being used and can we measure that to outcomes in our classroom…. Lightspeed gives us true insight into how our internet is used and how our students are accessing content as well as our staff. Having that ability in one paint of glass is powerful for us.”  

    For over 25 years, Lightspeed Systems has been a trusted partner for Texas schools, providing cutting-edge technology to keep students safe online. In 2023 Lightspeed Systems blocked an astounding 3.3 billion requests for security-related URLs. We achieve this level of protection through our advanced database and our ability to block unknown URLs.  

    With 23 million students relying on our technology and a comprehensive database built over 25 years, if a site is unknown to us, it’s probably not educational. That means schools can block unknown URLs without negatively impacting teaching and learning. Then when a new, unknown site is accessed or attempted to be accessed, it’s immediately routed to our database for categorization. This ensures that new threats are blocked initially, then identified and neutralized quickly, keeping students and schools safe. 

    But our partnership goes beyond software; it’s about working hand-in-hand with districts to build a culture of safety and digital responsibility. By partnering with Lightspeed Systems, Texas districts gain not only a cybersecurity solution, but a partner dedicated to building and sustaining safe, secure digital learning environments. 

    0 comments
    0 FacebookTwitterPinterestLinkedinEmail
    Supercharge your technology planning with the AI Plan Analyzer
    AI/VRCybersecurityDigital CitizenshipLeadershipPlanning and PreparationTechnical Support

    Supercharge Your Tech Plans with the AI Plan Analyzer

    by Miguel Guhlin
    written by Miguel Guhlin

    In the ever-evolving world of technology, having a robust and comprehensive plan is crucial for organizations of all sizes. But how can you ensure your technology plans are up to par? Enter the AI-Powered Plan Analyzer, a cutting-edge tool designed to revolutionize the way we assess and improve our technology strategies. While it can’t dig a trench, run fiber, or set up a printer, it can free up some time for you to knock out those other.

    Access the AI-Powered Plan Analyzer Now

    What is the AI-Powered Plan Analyzer?

    The AI-Powered Plans Analyzer is designed to provide:

    • In-depth assessments of various technology-related plans and strategies
    • Valuable insights, key performance indicators, service-level agreements
    • Recommendations for improvement

    Plus, you can access the ChatGPT Custom GPT, TCEA AI-Powered Plan Analyzer at no cost!

    What Problems Does It Solve?

    You may be wondering, “What problems does this solution solve?”

    Well, quite a few! Here are some:

    ProblemSolution
    Inconsistent Assessment of Technology PlansGenerates standardized assessment rubrics to evaluate District Technology Plans aligned to criteria
    Lack of Expertise in Cybersecurity and Incident ResponseDetailed analysis and scoring of plans, including cyber, incident response, and disaster recovery
    Visualizing Complex Network MapsCreate visual representations of network maps and diagrams
    Too Much Data in Tech Support MetricsAssess metrics and offers feedback
    Managing Ed Tech DeploymentsEvaluates Ed Tech deployments
    Inefficient Project Planning and ExecutionOffers Project Management Support
    Time-Consuming Documentation and Content CreationOutput Rubrics and Assessments in various formats

    You now have an idea of what Analyzer can do. Let’s take a look at the rubrics powering the Analyzer. You can print them in a variety of formats, including PDF, markdown, MS Word, etc.

    Comprehensive Assessment Rubrics

    Diverse assessment rubrics, each tailored to evaluate specific aspects of technology planning, are available. Let’s take a look at a few of them.

    1. Cybersecurity Plan Assessment. This rubric evaluates the effectiveness and comprehensiveness of your cybersecurity strategies. It aligns it with the NIST Cybersecurity Framework (CSF) and other relevant regulations.
    2. Cybersafety Plan Assessment. This rubric focuses on user education, content filtering, and privacy protection. It aligns to important regulations like CIPA and FERPA.
    3. Network Map Assessment. This tool evaluates the clarity, security, and scalability of your network maps. It ensures your infrastructure documentation is up to standard.
    4. K-12 School District Technology Plan Assessment. This rubric assesses technology plans against state education technology standards and E-Rate program requirements.
    5. Helpdesk and Technology Support Assessment. This rubric evaluates the efficiency and quality of your IT support services. The goal is to help you optimize your technology assistance strategies.
    6. Equipment Replacement Plan Assessment. Stay ahead of technological obsolescence with this rubric. It focuses on maintaining and upgrading technology infrastructure.
    7. Disaster Recovery and Business Continuity Plan Assessment. Ensure your organization is prepared for the unexpected with this rubric. It evaluates the effectiveness of your disaster recovery and business continuity plans.

    Access all the rubrics online via this document. Remember, you can customize them via the prompts you use; sample prompts are available to get you started. You will also find additional tools available based on infographics.

    Project Management Action Phases

    One of my favorite assignments for candidates for the IT/Tech Director certification has been to have them plan a project. They often rely on a tool like the one below:

    Now, you can ask the AI-Powered Plan Analyzer to generate the various components reflected in the action steps.For example:

    PhaseActionExample
    StartDefine the project scope, objectives, and key stakeholders.Objective: Deploy 50 wireless access points (WAPs) across the campus to enhance network coverage and performance.
    PlanDevelop a detailed project plan, including a timeline, resource allocation, and risk assessment.Task: Schedule site surveys and allocate team members for each building, ensuring equipment availability and addressing potential interference issues.
    ExecuteImplement the project plan by installing and configuring the wireless access points.Action: Deploy WAPs in Building A and B in the first week, conducting tests to verify signal strength and coverage before moving to the next buildings.
    StopReview the project outcomes, close out any remaining tasks, and document lessons learned.Task: Conduct a final inspection of the deployment, gather feedback from IT staff, and document any challenges encountered for future reference.

    This can be translated into a Gantt chart easily, one that you can adapt and use right away.

    Give it a spin.

    Alignment with Industry Standards

    One of the key strengths of the AI-Powered Plans Analyzer is its alignment with various state and federal standards. Whether it’s the NIST Cybersecurity Framework, ITIL best practices, or FEMA guidelines, these rubrics ensure your plans not only meet your organizational needs but also comply with relevant regulations and industry standards.

    Let’s take a closer look under the hood of the Analyzer and see how it aligns to various standards and guidelines.

    CyberSecurity Focused

    Document/ResourceRelated Standards/GuidelinesAlignment Notes
    K-12 Cybersecurity Implementation GuideTexas K-12 Cybersecurity Framework, National Institute of Standards and Technology (NIST) CSFAligns with guidelines for implementing impactful cybersecurity measures in schools, addressing state and national standards for cybersecurity.
    Implementing Most Impactful Security MeasuresNIST Cybersecurity Framework, Texas Cybersecurity FrameworkProvides recommendations aligned with recognized cybersecurity frameworks, ensuring that schools adopt effective and compliant security measures.
    Texas K-12 Cybersecurity InitiativeTexas Department of Information Resources (DIR)Adheres to state directives on cybersecurity initiatives tailored to the K-12 environment.
    Guide to Cybersecurity Risk AssessmentNIST Risk Management Framework (RMF), Federal Information Security Management Act (FISMA)Guides risk assessment processes in accordance with national and federal risk management standards for cybersecurity.
    Cyber Insurance StandardsCybersecurity & Infrastructure Security Agency (CISA) GuidelinesProvides insurance guidelines consistent with CISA’s recommendations for managing cyber risks in K-12 environments.
    National Cybersecurity Review (NCSR) 2024 FAQ SheetNCSR, DHS Cybersecurity Performance GoalsAligns with national cybersecurity performance review standards to guide school districts in meeting cybersecurity expectations.
    Safeguarding Sensitive Data – Encryption/Decryption ToolsFederal Information Processing Standards (FIPS) 140-2, CISA GuidelinesProvides encryption/decryption tools recommendations that adhere to federal standards for data protection.
    Key Findings and Recommendations in K-12U.S. Department of Education, State Cybersecurity LawsHighlights best practices and recommendations aligned with federal and state regulations for cybersecurity in K-12 education.

    Technical Standards and Metrics

    Document/ResourceRelated Standards/GuidelinesAlignment Notes
    Standards for Permissible Electronic Devices and Software ApplicationsTexas Education Agency (TEA) GuidelinesEnsures compliance with state-level requirements for electronic devices and software applications used in educational environments.
    Technician Appraisal ChecklistTexas Educator Evaluation and Support System (T-TESS)Evaluates technician performance using criteria consistent with state guidelines for educational staff appraisals.
    Tech Instructional Programs Purchasing RubricTexas Education Code (TEC) Chapter 44, Subchapter B, National Education Technology PlanEvaluates purchasing decisions in alignment with state procurement standards and national technology planning guidelines.
    Technology Support MetricsInformation Technology Infrastructure Library (ITIL)Establishes support metrics that align with ITIL standards, ensuring efficient and standardized technology support in educational settings.

    TCEA Project Management Action Phases and Supporting Documents

    Document/ResourcePurposeAlignment Notes
    TCEA Project Management Action Phases InfographicGuides users through the project management phases: Start, Plan, Execute, StopAligns with PMBOK (Project Management Body of Knowledge) standards, providing structured guidance for managing tech-related projects.
    De-Implementation Options InfographicOffers strategies for de-implementation processesSupports strategic project management by guiding the discontinuation or re-engineering of ineffective practices.
    TCEA Equipment Replacement Plan Assessment RubricAssesses equipment replacement plansAligns with asset management best practices and TEC standards, ensuring strategic planning and budgeting for technology lifecycle.
    TCEA Key Performance Indicators (KPI) GuidelinesSuggests actionable KPIs for various technology areasAligns with ITIL and strategic management practices, providing metrics for evaluating and improving technology operations.
    Executive Summary Utilization GuideGuides in creating tailored recommendations based on executive summariesAligns with strategic planning guidelines by ensuring that project recommendations are grounded in thorough analysis and context.

    What’s more, the Analyzer gets new update from time to time to reflect the changing realities of technology planning.

    Why Use the AI-Powered Plans Analyzer?

    Want more reasons to use it? Here is a quick wrap up of what it can do:

    1. Comprehensive Evaluation. Get a holistic assessment of your technology plans across multiple domains.
    2. Standards Compliance. Ensure your strategies align with important industry standards and regulations.
    3. Actionable Insights. Receive valuable feedback to improve and refine your technology plans.
    4. Time-Saving. Streamline the assessment process with this efficient, AI-powered tool.
    5. Versatility. The analyzer has rubrics tailored to your needs.

    To use it, follow these simple steps:

    • Upload your district technology plan, cybersecurity plan
    • Ask the Analyzer to assess it and
    • Ask it to give it a score with suggestions for improvement
    • Review changes then make them if appropriate

    That is all. Easy, right?

    The AI-Powered Plan Analyzer

    The Analyzer is a powerful tool for school tech planning. It’s not just for assessment, it’s your planning assistant. It uses clear guides and follows industry rules. This makes planning faster and better. As a tech director, I wish I had enjoyed access to it. Use it to make complex planning tasks simpler and easier.

    Access the AI-Powered Plan Analyzer Now
    0 comments
    0 FacebookTwitterPinterestLinkedinEmail
    CybersecurityLeadershipTechnical Support

    The Ogre-tastic Layers of Cybersecurity: A Guide for K-12 Schools

    by Dr. Brian Brown
    written by Dr. Brian Brown

    Disclaimer: This blog is not affiliated with or endorsed by DreamWorks Animation or the Shrek franchise.

    In the movie Shrek, the title character famously states, “Ogres are like onions. They have layers.” Little did he know that this metaphor could easily be applied to cybersecurity. Ogres, onions, and cybersecurity are made up of layers, each one an important part in protecting a school district’s sensitive information. These layers work together to create a defense system that shields data from cyberattacks, much like how Shrek’s tough exterior protects his softer side. In today’s digital world, especially for K-12 schools, cybersecurity has become more essential than ever.

    Why Layers of Cybersecurity are Important for K-12 Schools

    As schools have become more reliant on technology, the need for robust cybersecurity practices has grown. K-12 schools, often considered “soft targets” by cybercriminals, are particularly vulnerable. Our institutions manage sensitive information, including student records, health information, staff data, and even financial details. A data breach can have severe consequences, not only putting children’s personal information at risk but also compromising the trust of the local community.

    Consider this: many schools now operate on cloud-based platforms for grading, attendance, communication, and learning management systems. If these platforms are compromised, students’ academic records, health data, or even photos can be exposed to hackers. Additionally, K-12 schools are often underfunded and understaffed in the IT department, which means we may not always have the latest cybersecurity measures in place. A single breach can disrupt learning, lead to costly ransomware attacks, and jeopardize the safety and privacy of everyone involved.

    How Cybersecurity Relates to Information Security

    To understand the layers of cybersecurity, it’s essential to know how it fits into the broader concept of information security. While these terms are sometimes used interchangeably, they refer to different things. Cybersecurity focuses on protecting digital assets and systems from attacks, while information security is a broader umbrella, encompassing the protection of both digital and physical information.

    For K-12 education, cybersecurity deals with safeguarding our digital infrastructure, everything from the Wi-Fi network to student devices. Information security, on the other hand, involves managing all information assets, including physical documents, ensuring that private records remain private and data integrity is maintained, whether online or offline. Both are crucial for schools, as they intersect at many points, especially within digital classrooms.

    The Layers of Cybersecurity That Protect Sensitive Data

    In cybersecurity, the idea of defense in depth is fundamental, and much like the layers of an onion, or an ogre, multiple layers of defense are required to fully protect data. The following are key layers that K-12 schools should consider when building a comprehensive cybersecurity strategy:

    1. Physical Security: The outermost layer of cybersecurity often starts with physical protection. This includes securing devices like school computers, servers, and storage rooms to prevent unauthorized access. Locking doors, installing surveillance cameras, and ensuring that only authorized personnel can access critical areas is the first line of defense.

    2. Network Security: A robust firewall is essential to block unauthorized users from accessing the school’s network. Network security also includes tools like intrusion detection systems (IDS) that monitor network traffic for signs of unusual activity. Schools should also use Virtual Private Networks (VPNs) for secure communication and ensure that their Wi-Fi networks are encrypted and password-protected.

    3. Endpoint Security: With students and teachers often using mobile devices such as laptops, smartphones, and tablets, endpoint security is vital. Schools must install endpoint detection and response software and ensure regular software updates to prevent vulnerabilities. Implementing mobile device management (MDM) can help administrators monitor and secure student devices.

    4. Data Encryption: Data encryption is an essential layer that ensures even if a bad actor intercepts data, they cannot easily read or use it. Schools should encrypt sensitive student and staff information, both at rest (stored data) and in transit (data being shared across networks).

    5. Identity and Access Management (IAM): Not everyone needs access to every part of a school’s digital ecosystem. By implementing access controls, such as multi-factor authentication (MFA) and role-based access controls (RBAC), schools can ensure that only authorized individuals can access sensitive information. For example, a teacher may not need access to administrative financial records, while an IT administrator shouldn’t have access to student health records.

    6. Incident Response Plan: Even with multiple layers of defense, no system is immune to attacks. That’s why it’s important for schools to have a detailed incident response plan. This layer ensures that in the event of a breach, there are procedures in place to mitigate the damage, recover lost data, and communicate effectively with stakeholders.

    Cybersecurity is for Everyone

    Cybersecurity isn’t just the responsibility of IT professionals; everyone in a school can play a role. Everyone, such as teachers, administrative staff, and even students, can contribute to a more secure environment with these simple but effective practices:

    1. Strong Passwords: One of the easiest ways to improve security is by using strong, unique passwords for different accounts. Encourage staff and students to use passphrases or a mix of letters, numbers, and symbols, and to avoid using easily guessable passwords like “password123.” Entropy, the Second Law of Thermodynamics, can be applied to password creation to create complex passwords by combining random characters, numbers, and symbols in a way that maximizes unpredictability, making it harder for bad actors to guess or crack through brute-force methods.

    2. Multi-Factor Authentication (MFA): Implement MFA wherever possible. This adds an extra layer of security by requiring users to provide two or more verification factors, such as a password and a one-time code sent to their phone.

    3. Training: We can avoid many cyberattacks by learning how to recognize phishing emails, which often appear to be from legitimate sources but aim to steal login credentials or install malware. Training staff and students to avoid clicking on suspicious links can prevent many potential threats.

    4. Software Updates: Regular software updates and patches are often the first line of defense against known vulnerabilities. We should keep our devices and software up to date, which helps close the door on potential threats.

    5. Backup Important Data: In case of a ransomware attack or system failure, having regular backups of important data is critical. Users should be encouraged to store backups on secure, remote locations or cloud services, separate from their primary system.

    Cybersecurity is Ogre-tastic!

    Just like ogres have layers, so does cybersecurity. For K-12 schools, implementing these multiple layers, from physical and network security to training and awareness among staff and students, is crucial for safeguarding sensitive data. The responsibility of cybersecurity doesn’t fall solely on IT departments; everyone can contribute to building a secure learning environment. By staying vigilant, following best practices, and understanding the role that each layer plays, schools can protect their digital assets, ensure student privacy, and create a safe online space for learning.

    Join us at SysAdmin 2024

    Are you a system administrator or technical support staff member looking for a conference that fits your distinct needs? We’ve got you covered! Join us for SysAdmin 2024, the leading conference designed with you in mind.

    Check out sessions like Dr. Brian Brown’s “From Ogre to Firewall: Shrek’s Multi-Layered Security Strategy” and more, this Nov. 7-8 in Georgetown, TX!

    Learn More
    0 comments
    0 FacebookTwitterPinterestLinkedinEmail
    Cybersecurity

    How Data Masking with ClassLink’s DataGuard Keeps Student PII Safe

    by ClassLink
    written by ClassLink

    In today’s digital landscape, schools face increasing challenges in safeguarding sensitive student and staff data. With the widespread use of third-party applications and online tools, the risk of data breaches has never been higher. To address these concerns, many institutions are turning to advanced cybersecurity techniques like data masking. 

    What is Data Masking?

    Data masking is a powerful cybersecurity technique that enhances data privacy by altering sensitive information so unauthorized users can’t access it. This method involves substituting key data elements—such as names, social security numbers, or other Personally Identifiable Information (PII)—with fake data or random characters, rendering them meaningless to anyone attempting to misuse them. 

    As a result, schools can hide sensitive student or staff data, like first names or class names, when sharing it with external vendors, dramatically reducing the risk of exposure or breaches.

    How Does Data Masking Improve School Cybersecurity?

    Cybersecurity and data privacy are top concerns for K-20 tech leaders, and for good reason. Schools use hundreds of third-party digital tools and applications that require the sharing of student information. This opens up the possibility of data breaches, which can have serious legal, financial, and reputational consequences. 

    Data masking changes the landscape by significantly lowering breach risks. Instead of sending full data sets containing sensitive student or staff information to third-party vendors, schools can mask unnecessary PII and only provide what is required. This ensures that, even if a breach occurs, no meaningful data is compromised. In an era where data breaches are becoming increasingly common, employing data masking is a proactive step toward strengthening a school’s cybersecurity infrastructure.

    ClassLink DataGuard: Protecting Your School’s Data

    ClassLink’s DataGuard takes data masking to the next level, offering schools an easy and effective way to control the data shared with third-party vendors. DataGuard is an upgrade to ClassLink’s Roster Server and is designed to protect key PII fields like first, middle, last, and class names through dynamic letter scrambles. 

    What makes DataGuard stand out is its ability to empower schools to selectively share only the necessary data while masking everything else. For example, if a vendor doesn’t need to know a student’s full name but still requires a unique identifier for roster management, DataGuard can scramble that name to prevent misuse while enabling the vendor to function properly. This ensures that sensitive data never leaves your system unprotected.

    By using DataGuard, schools reduce their exposure to data breaches and gain peace of mind knowing that sensitive student and staff information is always safeguarded.

    Take Control of Your School’s Data Today

    Protect your school’s sensitive information with ClassLink DataGuard. Learn more about how DataGuard can enhance your cybersecurity and minimize your data breach risks by visiting the DataGuard page.

    0 comments
    0 FacebookTwitterPinterestLinkedinEmail
    A person working on a laptop in a classroom, surrounded by digital icons for security and privacy, while other students in the background are writing.
    Artificial IntelligenceCybersecurityDigital LiteracyEquity, Diversity, Inclusion

    How to Protect Student Privacy When Using AI

    by Dr. Bruce Ellis
    written by Dr. Bruce Ellis

    Mr. Rodriguez, a high school English teacher, used an AI writing assistant to give feedback on his students’ personal essays. Excited about the tool’s potential, he uploaded the essays without removing names or personal details. Months later, he was shocked to find out the AI company had used the essays to train their model. When other users prompted the AI with similar topics, it occasionally generated responses that included his students’ personal experiences, family stories, and even sensitive information about their struggles and dreams. What seemed like a harmless use of technology had exposed his students’ private lives, highlighting the critical need to anonymize student work before using AI tools.

    While parts of this story are exaggerated for illustration, the concerns are real. AI systems learn from the data they process, and non-anonymized student work could shape the AI’s responses in subtle ways. Even if specific personal stories aren’t repeated word-for-word, writing styles, ideas, or themes might get incorporated into the AI’s knowledge base. This raises important issues about student privacy, data ownership, and ethical AI use in education. Teachers and schools must protect student information from both immediate breaches and the long-term impact of AI learning from student data. Anonymizing student work before using AI tools is a key step in keeping student privacy intact and ensuring responsible technology use in classrooms.

    Protect Student Safety with TCEA PROTECT

    Before using any AI tool with student data, it’s important to know how that tool handles the information you provide. You can do this by utilizing our TCEA PROTECT model, which offers a practical framework for evaluating and implementing safe digital tools.

    Ideally, you should be able to disable the AI’s learning feature to prevent it from using your data to improve its model. However, not all tools offer this option. Some AI providers clearly state on their websites that they don’t use user inputs for training, while others may collect and use this data by default. Always verify the data practices of the AI tool you plan to use before sharing sensitive information. If you can’t turn off the learning feature or aren’t sure about the tool’s data policies, it’s best to take precautions.

    Best Practices to Protect Student Safety When Using AI

    Consider these methods to anonymize student data before inputting it into AI tools:

    Assign Unique Identifiers

    Set up a system where each student is given a random number or code at the start of the term. This code serves as their identifier for all AI-processed work. For example, “Jane Doe” becomes “Student_A7X9.” Keep a secure list that links these codes to student names, accessible only to authorized staff. When submitting work to AI tools, use these identifiers only. This protects student identities and helps avoid any biases based on names or perceived gender or ethnicity.

    Remove Personal Details

    Carefully review each piece of student work before submitting it to AI tools. Look for personal information, including names, addresses, mentions of siblings, and specific personal experiences that could identify a student. Use the find-and-replace function in word processors to swap out names with identifiers. For essays or reports, read through to catch and remove any identifying information. While time-consuming, this step is crucial for protecting student privacy.

    Use Data Scrubbing Tools

    Data scrubbing tools can help speed up the anonymization process. These tools automatically detect and remove personal information from documents. Tools like AI Eraser, a free Chrome extension, can quickly check your data, flagging potential personal identifiers before submission. Some tools can also handle different data formats, from spreadsheets to text documents. While helpful, these tools should be used alongside manual review to catch context-specific information that might slip through.

    Review Before Submission

    Even after using automated tools or following anonymization procedures, a final manual review is essential. Randomly select samples of the anonymized work and check them for any remaining identifying information. Look for subtle details, like unique writing styles or personal examples, that could be linked back to a specific student. This final step is a safeguard against accidental data exposure and can improve your anonymization process over time.

    Train Students on Anonymization

    Teaching students about data anonymization protects their privacy and prepares them for a world where data security is increasingly important. Hold sessions explaining why anonymization matters, especially in the context of AI in education. Show students how to remove personal details from their work, focusing on both obvious and subtle identifiers. This training not only helps with anonymizing school work but also builds valuable data privacy awareness they can use in the future.

    A Top Priority for Educators: Protect Student Privacy

    As we continue to learn more about AI and its potential for education, it is increasingly more important to protect student privacy. Students’ data security must be a top priority. The methods outlined—assigning unique identifiers, removing personal details, using data scrubbing tools, reviewing submissions, and training students—provide a strong foundation for keeping sensitive information safe when using AI tools. By adopting these practices, educators can take advantage of AI while maintaining trust and confidentiality. The goal isn’t to avoid new technologies, but to use them responsibly and ethically. As AI becomes more prevalent in classrooms, we must prioritize student privacy, teach digital literacy, and ensure that AI integration is thoughtful and secure. In doing so, we create a safer, more equitable learning environment that equips students for a future where data awareness and privacy are critical.

    0 comments
    0 FacebookTwitterPinterestLinkedinEmail
    Cybersecurity

    Cybersecurity Basics for Educators

    by Macee Hall
    written by Macee Hall

    Teaching with tech can be scary, especially when you’re just starting out. With so many types of cybersecurity threats out there, managing student safety in tech-enabled classrooms can feel like a big task. Here are some cybersecurity basics, from common types of cyber threats to tips for incorporating cyber safety into your classroom, to help start you on your journey to a safer digital classroom!

    But before we get into the basics…

    Did You Know?

    You can sign up for the Cybersecurity for Educators (Data Guardian I) online, self-paced course to learn more about safeguarding passwords, data, and more? Plus, check out this blog post on digital tools from TCEA’s very own Director of Professional Development, Miguel Guhlin!

    Understanding Common Cybersecurity Threats

    The first step in becoming a cybersecurity expert is to understand common types of cyberthreats. Although there are several types of cyber attacks, we’re just covering the most common ones that you may encounter as an educator. For a more detailed list of cyberattacks, check out this article from Cisco. 

    Phishing attacks

    Phishing attacks are becoming increasingly more common as our society relies more heavily on technology. Phishing typically consists of a malicious entity sending a communication like an email or text that looks like it is from an actual entity or person within your organization. These attacks try to gain your trust and collect sensitive information.

    Ransomware

    Ransomware, or malware, is a type of software that can be downloaded to your device and lock you out of your files. This can affect just your classroom or even your whole district, depending on the type of malware downloaded. Victims are often asked to pay a ransom to get their information back. 

    Data breaches

    A data breach is the unsanctioned or unauthorized loss of sensitive information, like student’s records or private data. Unlike other types of cyberthreats, data breaches can be intentional or accidental.

    Social engineering

    Social engineering attacks are more in-depth attacks that involve using psychological manipulation to convince victims to give up important information. This is the type of cyberattack we see in movies, where a call center pretends to be a bank or tech support to gain access to the victim’s data. 

    Employing Cybersecurity Basics in the Classroom

    Now that you know the most common types of cyberattacks that you may face as an educator, you’re probably wondering how to protect yourself and your students from internet crime. Keep your students safe both in and out of the classroom is to educate them on these cybersecurity basics in an age-appropriate way. Nowadays, technology usage starts earlier in life than ever before. Start teaching your students cybersecurity tactics early and continue to refresh or expand their knowledge throughout their K-12 years with these lesson plan ideas. Here are some ideas from my personal AI program of choice, Perplexity!

    Cybersecurity Basics for Elementary Learners

    For elementary schoolers, it’s important to introduce basic safety measures in fun and engaging ways.  

    • Use interactive games and activities to teach internet safety basics. For example, cyber.org offers “Keys to Cybersecurity,” a collection of self-paced activities for grades 3-8 that introduce cybersecurity concepts.
    • Read cybersecurity-themed children’s books like “Sarah the Cyber Hero” by by Emily Rauer to introduce key ideas.
    • Teach password security with simple activities like this printout from TeacherVision.
    • Use comic strips like “The Adventures of Pascal and Python” from cyber.org to explain internet safety concepts.
    • Incorporate basic lessons on privacy, not sharing personal information online, and reporting anything unusual to adults.

    Cybersecurity Basics for Middle School Learners

    For middle schoolers, start introducing more technical concepts while keeping things fun to keep students engaged while also setting up a foundation for future learning.

    • Use interactive platforms like CyberPatriot or National Cyber League that simulate cyber threats in safe environments.
    • Teach basic encryption concepts through hands-on activities and games.
    • Introduce topics like online privacy, digital footprints, and evaluating online information sources.
    • Use video series like CISA’s Cyber Safety Series to highlight common online threats.
    • Incorporate cybersecurity topics into other subjects like math, science, and social studies.

    Cybersecurity Basics for High School Learners 

    For high schoolers, you can start to introduce more in-depth or “adult” concepts that will help keep students safe later in life.

    • Offer full courses on cybersecurity fundamentals, covering topics like digital citizenship, cryptography, networking, and system administration.
    • Use platforms like cyber.org to let students practice cybersecurity skills in virtual environments.
    • Teach coding basics with resources like Codecademy.
    • Encourage participation in cybersecurity competitions and camps.
    • Introduce concepts like threat modeling, authentication, and social engineering attacks.
    • Discuss cybersecurity career paths and the skills needed to enter the field.

    Stay Informed and Educated on Current Cyber Events

    Perhaps the best way to safeguard yourself and your classroom from cyber attacks is to remain vigilant in understanding and knowing the warning signs for the different types of attacks you might face. Stay up to date with news websites like “The Hacker News” and “Security Week” for overall trends, and keep an eye on online blogs and platforms like LinkedIn for industry-specific updates.

    How do you stay on top of cybersecurity efforts? Let us know in the comments!


    *This blog was outlined in part with help from Perplexity.AI.

    2 comments
    0 FacebookTwitterPinterestLinkedinEmail
    AI/VRArtificial IntelligenceCTO/CIOCybersecurityDigital CitizenshipDigital LiteracyTechnical Support

    Responsible AI Adoption

    by Miguel Guhlin
    written by Miguel Guhlin

    While attending a start-of-the-year school district event, it became apparent to me that many districts are at different places in a journey towards adopting AI in schools. The fundamental question for them is, “How can we as educators responsibly harness the power of AI while safeguarding student interests?” As artificial intelligence (AI) reshapes how schools work — and leaders lead — schools face the challenge of effective, ethical integration of AI in academic settings.

    That’s why we’re providing two powerful documents that you can use to integrate AI responsibly into your district.

    The first document gives you a roadmap towards full AI adoption in your school organization. The second provides you with TCEA’s Essential Learning Expectations for AI. Together, these documents provide a framework for AI adoption in your teaching, learning, and leading spaces. They seek to provide practical guidance for educators trying to make sense of it all.

    Key Points

    It’s important to keep several key points in mind, especially since AI adoption in schools will take time. There are no shortcuts, but you can track your school or District’s progress using the Five Phases of District AI Adoption. Those phases include:

    1. AI Secured. At this phase, AI usage is prohibited or discouraged.
    2. AI Exploration. In this phase, guardrails are available that allow exploration of free versions of digital tools.
    3. AI Pilot Programs. Managed AI tools are introduced for specific purposes.
    4. AI Unification. A clear district-wide approach to centralized AI use is in place and it is integrated into key areas.
    5. AI Everywhere. AI is fully integrated into school district policies, procedures, curriculum, and guidance is available to all.

    These descriptions briefly touch on the points raises in the infographic above. Let’s take a closer look at each of the categories that define each phase.

    Categories

    There are also categories that define each phase, including:

    • District Policy. Policy moves from outright securing of AI tools to full integration and acceptance.
    • Account Management. This area determines central account management, moving from no accounts allowed to integration into single-sign-on (SSO).
    • District Guidance. The District has put together documents providing specific guidance on the use and evaluation of AI tools for a variety of purposes.
    • Curriculum Integration. AI usage in the classroom ranges from non-usage to teacher and student use.
    • Community Outreach. Shifts from focusing on fear to inviting the community to better understand what part AI plays in K-12 education.

    What other areas are key to responsible AI adoption? Let’s take a look.

    Data Privacy and Security

    Protecting student information is paramount when using AI tools in education. Account management for students and staff, data is critical. Districts must ensure AI solutions are part of SSO. This makes it easier for staff and students to access it in approved ways. Do this to safeguard sensitive information. Another point to remember? Communicate clear suggestion on how to protect data.

    Here’s a sample classroom scenario to illustrate this:

    Mr. Rodriguez, a middle school math teacher, uses an AI-powered math practice app. Before implementation, he ensures all student data is anonymized and securely stored, explaining to parents how the tool enhances learning without compromising privacy.

    AI as a Supplemental Tool

    Responsible AI adoption seeks to enhance, not replace, curriculum and instruction. When exploring how to use AI in the classroom, knowing what guidance to give teachers and staff is critical. AI should be approached as a tool that complements our efforts at teaching and learning, not supplants it.

    What this might look like in the classroom:

    Dr. Lee, a biology professor, incorporates an AI-driven virtual lab simulation into her course. She emphasizes to students that this tool complements hands-on lab work, providing additional practice opportunities rather than substituting real experiments.

    Critical Thinking and Media Literacy

    AI isn’t a panacea or perfect tool. While many know that they need to be critical, they may be unsure of how to best critique and assess AI generated content. To ensure staff and students don’t simply use and consume AI content uncritcally, all must learn to critically evaluate AI-generated content.

    You can find several critical thinking approaches in the TCEA blog, as well as direct mention of The SIFT Approach.

    View | Get a Copy in Canva | Get PPTx or PDF

    Consider this scenario with an elementary school librarian:

    Ms. Patel, an elementary school librarian, designs a lesson on distinguishing between human-written and AI-generated stories. She guides students through analyzing text characteristics and discussing the importance of human creativity.

    TCEA Essential Learning Expectations

    TCEA offers Essential Learning Expectations for students, teachers, school leaders, and instructional coaches.

    The Essential Learning Expectations for AI in Education are designed to guide all stakeholders in the educational system – teachers, students, instructional coaches, and administrators – in the ethical and effective use of AI technologies. These expectations build upon existing educational research and best practices, while addressing the unique challenges and opportunities presented by AI in learning environments.

    The TCEA Essential Learning Expectations (ELEs) for Artificial Intelligence (AI) in Education (View | Get a copy)
    TCEA Essential Learning Expectations (ELEs) for AI in Education – Generated by Author

    The TCEA ELEs for AI in Education include:

    • AI Literacy
    • Ethical AI Use
    • AI-Enhanced Learning
    • AI and Critical Thinking
    • AI Collaboration and Innovation

    You can explore these expectations in more details with examples in this document.

    Responsible AI Adoption

    By adopting a phased approach and sticking to essential guardrails, you can begin the work of using AI in teaching, learning, and leading situations. You will be able to seize the benefits of AI, while protecting students and staff. What’s more, you can use AI to have a positive impact on the work you are about in K-12 education.

    0 comments
    2 FacebookTwitterPinterestLinkedinEmail
    Author-generated image
    CybersecurityLeadership

    Student Privacy Shield: TCEA PROTECT

    by Miguel Guhlin
    written by Miguel Guhlin

    Are you a school district technology leader? If you are, you have a tough responsibility. That duty is protecting student data privacy. And, at the same time, you must balance new, popular, and innovative educational technologies. How can you ensure student privacy and review new solutions pushing their way into the classroom are safe? TCEA’s PROTECT rubric (view | get a copy) offers a practical framework for evaluating and implementing privacy-conscious tools. You also can try it out via custom GPT.

    Three Key Points for K-12 Technology Leaders

    1. Prioritize Parental Rights and Transparency

    “The most important thing is to make sure that technology is not just available but that it’s being used effectively to support learning.” – Karen Cator, Former Director of the Office of Educational Technology at the U.S. Department of Education

    Are your ed tech solutions clear about parental rights and data usage? If not, you may need to check in with your vendor or solution provider.

    2. Implement Robust Data Retention and Deletion Policies

    “Cybersecurity is a shared responsibility that requires ongoing collaboration between school staff, students, and families.” – Amy McLaughlin, Cybersecurity Project Director.

    One question to consider is, “What is the Ed Tech vendor’s student data retention policy?” An important follow up is, “What happens to that data when the relationship is over? How does it get deleted, and how do you get a secure copy of it?” Not getting straight answers or setting up arrangements at the start of the relationship can potentially result in a rocky, embarrassing ending.

    3. Enhance Security Measures

    “Security is always going to be a cat and mouse game because there’ll be people out there that are hunting for the zero day award, you have people that don’t have configuration management, don’t have vulnerability management, don’t have patch management.” – Kevin Mitnick, Cybersecurity Consultant and Former Hacker

    The question to consider here is, “Are your ed tech solutions employing state-of-the-art security practices?” Two nonnegotiable practices are multi-factor authentication and end-to-end encryption.

    Introducing the TCEA PROTECT Rubric

    Now, let’s take a look at a process you can put in place: TCEA PROTECT.

    The PROTECT rubric addresses key aspects of student data privacy, including:

    1. Compliance with major regulations like FERPA, COPPA, and GDPR.
    2. Data collection, use, and sharing practices.
    3. Security measures and encryption.
    4. Parental rights and access to student data.
    5. Age-appropriate considerations for under-13 and under-18 users.
    6. Transparency in data practices and third-party relationships.
    7. User control over data, including deletion and opt-out options.

    With PROTECT, educators, administrators, and parents can quickly assess whether an educational technology solution meets the necessary standards for protecting student data privacy across different regulatory environments.

    Note: Directions for using the PROTECT rubric with an AI tool appear at the end of this blog entry.

    Now that you are aware of key aspects, let’s dig a little deeper into each aspect.

    PROTECT Rubric Components

    The rubric has several components, matching the letters of the PROTECT acronym. Let’s review each in turn below.

    P – Parental Rights and Access

    • Clearly states parental rights to access and control their child’s data
    • Complies with FERPA (USA) and GDPR (EU) requirements for parental access

    R – Retention and Deletion

    • Specifies data retention periods
    • Allows users to delete their data entirely
    • Complies with data minimization principles

    O – Opt-out Options

    • Provides clear opt-out choices for data sharing and third-party use
    • Allows users to opt-out of targeted advertising

    T – Transparency

    • Lists all data collected and how it’s collected
    • Clearly states data ownership
    • Discloses all third-party data sharing

    E – Encryption and Security

    • States how data is protected and encrypted
    • Enforces strong password creation
    • Implements multi-factor authentication

    C – Consent and Age Restrictions

    • Addresses COPPA (USA) and GDPR (EU) requirements for under-13 users
    • Clearly outlines consent mechanisms for data collection and use

    T – Third-party Management

    • States all third parties involved and information shared with each
    • Requires third parties to adhere to the same privacy standards
    • Notifies users of changes in third-party relationships

    Now, let’s turn our attention to the implementation of the PROTECT process in your organization.

    Implement the TCEA PROTECT Process

    The TCEA PROTECT rubric provides you with a tool that you can use to effectively assess your current solutions. Rely on it and your favorite AI solution to do the following:

    1. Assess Current Tools: Apply the rubric to existing technology solutions to identify areas for improvement.
    2. Set Minimum Standards: Decide what is a minimum acceptable score for new digital tools and services.
    3. Nurture Stakeholders: Provide professional learning to your teachers, administrators, and IT staff on using the rubric. They can easily use it to assess potential purchases.
    4. Conduct Audits: Perform annual privacy audits using the rubric. This can help with locking in compliance and modeling best practices.

    How To Get Started

    Want to facilitate professional learning in your school district around TCEA PROTECT? Consider providing learning opportunities through these activities below.

    ActivityDescriptionParticipants
    Privacy Audit WorkshopTrain staff to use the PROTECT rubric for evaluating edtech toolsIT Staff, Curriculum Leaders
    Vendor Communication SessionPractice clear communication with vendors about privacy expectationsTechnology Directors, Procurement Team
    Parent Privacy NightEducate parents on district privacy practices and their rightsParents, School Leaders, IT Staff
    Student Data Rights LessonDevelop a lesson plan for teaching students about their data rightsTeachers, Curriculum Developers

    How To Use TCEA PROTECT With AI Support

    Ready to give PROTECT rubric a spin? Some points to keep in mind:

    • The maximum score possible is 14 points. A higher score indicates better alignment with student data privacy best practices and regulations.
    • Use an internet-connected AI solution, such as MS CoPilot, ChatGPT Plus, You.com, or Perplexity.
    • Assess a few digital tools using different AI tools to see how each AI applies the rubric, and review the scores yourself.
    • Use the rubric to assess the Privacy Policy and/or Terms of Service for an Ed Tech solution.

    Here are some popular AI tools scored with PROTECT. Since scores can vary between AI chatbots, and rubrics can be inaccurate (which is why you may not use them for student assessment), I’ve grouped scores by AI chatbot. I’ll share trends on scoring for each chatbot afterwards.

    Scorer: Claude.ai (Pro version)

    Scorer: Perplexity.ai (Pro version)

    Let’s take a closer look at the AI analysis of these three solutions.

    Using AI and TCEA PROTECT To Analyze

    As you can see, the scores are quite similar, with the largest discrepancy being for MagicSchool.ai. Claude.ai gave higher scores. It also allowed for multiple documents to be assessed within a single Project, while keeping each separate for easy citation, facilitating comparison and sharing. In analyzing Goblin Tools, it’s clear that it lacks the complexity of the other two tools (e.g. Curipod and MagicSchool). But that does not excuse it from beefing up its TOS and Privacy policy to cover the bases delineated in the PROTECT rubric. Specific feedback for each vendor can be found in the complete results.

    AI ToolClaude.ai ScorePerplexity.ai Score
    Curipod12.0 / 1411.6 / 14
    Goblin Tools5.0 / 144.4 / 14
    MagicSchool12.8 / 1411.2 / 14

    In spite of my concerns about the AI use of rubrics to score documents, these results from two different AIs are consistent with one another. Both Claude.ai and Perplexity.ai appear to be capable of assessing AI tools’ Terms of Service and Privacy policies using the PROTECT assessment prompt. The choice between them may depend on your access to the tool, and your preferences for the interface and workflow.

    TCEA PROTECT: Student Privacy Shield Tool

    Ready to evaluate privacy policies and terms of service for your favorite Ed Tech solutions? While you can use the rubric’s instructions with any AI, a ChatGPT custom GPT has been set up you can use. Access it online.

    Conclusion

    The PROTECT rubric provides a structured approach for K-12 technology leaders to assess and improve student data privacy practices. It does so by focusing on parental rights, data retention, and security measures. This makes it easier to create a safer digital learning environment.

    The TCEA PROTECT rubric can help you as a K-12 technology leader to safeguard student data privacy as you implement innovative solutions. Establish the TCEA PROTECT process in your school district today. If you need assistance, please reach out to Director of Professional Development, Miguel Guhlin at mguhlin@tcea.org.

    Additional Resources

    2 comments
    0 FacebookTwitterPinterestLinkedinEmail
    cybersecurity
    AdvocacyCybersecurityLibraries

    A Step Towards Secure Networks: New FCC Cybersecurity Pilot

    by Matt Russell
    written by Matt Russell

    In today’s digital age, schools and libraries are becoming increasingly reliant on technology to provide essential services and educational opportunities. However, this growing dependency also makes them vulnerable to cyber threats. Recognizing this critical need, the Federal Communications Commission (FCC) has launched a new initiative to enhance cybersecurity for these institutions. The Schools and Libraries Cybersecurity Pilot Program, with a budget of up to $200 million over three years, aims to bolster the defenses of broadband networks and data in schools and libraries. Here’s why this initiative is a game-changer for educational technology.

    The Need for Robust Cybersecurity in Education

    Educational institutions are treasure troves of sensitive information, and the protection of this information is paramount. Cyberattacks on schools and libraries can disrupt educational processes, compromise personal information, and result in significant financial losses. The FCC’s Cybersecurity Pilot Program addresses these vulnerabilities by providing the necessary resources to implement advanced cybersecurity measures. 

    Who Can Apply?

    Eligibility for the Pilot Program extends to schools, libraries, and “consortia” of these institutions that meet the E-Rate program’s requirements. This inclusivity ensures that a wide range of educational institutions, regardless of their previous participation in the E-Rate program, can benefit from enhanced cybersecurity.

    How to Apply

    The application process for the program is two-fold:

    1. Part One: General Information and Proposal Submission
      • Applicants must provide details about their experience with cybersecurity, their commitment to best practices, and their use of federal resources.
      • A description of the proposed project, including goals, objectives, and the cybersecurity risks it aims to mitigate, must be included.
    2. Part Two: Detailed Cybersecurity Information
      • Selected participants will provide comprehensive details about their current cybersecurity measures, history of cyber threats, training policies, and challenges faced.

    The FCC plans to open the application window this Fall, and interested parties should prepare their proposals accordingly.

    Eligible Services and Equipment

    Participants in the Pilot Program can seek reimbursement for a wide array of cybersecurity eligible services and equipment. This broad scope ensures that institutions can tailor their cybersecurity measures to their specific needs and vulnerabilities.

    Selection Criteria

    To ensure a diverse range of Pilot projects, the FCC will prioritize funding for a mix of large and small, urban and rural schools, and libraries, with a special emphasis on low-income and Tribal applicants. This approach aims to address the cybersecurity needs of the most vulnerable populations effectively.

    Post-Application Process

    Once selected, participants will be notified via Public Notice and provided with instructions for the next steps, including the competitive bidding process for procuring cybersecurity services. Successful applicants will receive a Funding Commitment Decision Letter (FCDL) to formalize their funding approval. This structured process ensures transparency and accountability in the use of funds.

    Safeguards Against Misuse

    To prevent waste, fraud, and abuse, the Pilot Program incorporates several safeguards. Participants must adhere to competitive bidding, document retention, and audit requirements. Additionally, stringent penalties are in place for non-compliance, ensuring that funds are used appropriately and effectively.

    The TCEA applauds the FCC’s Schools and Libraries Cybersecurity Pilot Program. This initiative is a significant step towards securing the digital infrastructure of our educational institutions, safeguarding sensitive data, and ensuring uninterrupted learning. By investing in robust cybersecurity measures, we can create a safer, more resilient educational environment for students, educators, and the community.

    TCEA encourages eligible schools and libraries to prepare their applications and take full advantage of this invaluable opportunity. For more information, stay tuned for updates from the FCC and the TCEA. Let’s work together to make our educational institutions cyber-safe!

    0 comments
    0 FacebookTwitterPinterestLinkedinEmail
    cybersecurity
    CTO/CIOCybersecurityLeadership

    New Cybersecurity Resources for School Administrators

    by Lori Gracey
    written by Lori Gracey

    The National Initiative for Cybersecurity Careers and Studies (NICCS) has released some new, free resources for school district leaders who are charged with overseeing cybersecurity. In a recent study, cybersecurity remains the biggest concern among district ed tech leaders, with nearly all 981 survey respondents reporting that they are working to improve protections. The new resources from NICCS can help.

    Cybersecurity Resources Available

    The first step in securing your district’s data is to assess your current security level. The website offers an online assessment that that will recommend the improvements you need to make to improve safety and security within your school community. You can access the free tool here.

    Once you’ve identified any security issues, you can begin to address them using the many resources that NICCS has collected. These include:

    Of course, these steps are best supported by offering ongoing training for staff. The NICCS website lists a number of free and low-cost cybersecurity training options. (You should also consider having your staff complete the TCEA online course Network Security to help protect both their own and district data.) The site also provides information on how best to report incidents within your district if the worst does happen. Finally, NICCS offers a number lesson plans for K-12 educators who want to include cybersecurity in their teaching.

    The website is one you should bookmark and use frequently as you lead your district in being safe from cybersecurity attacks.

    0 comments
    0 FacebookTwitterPinterestLinkedinEmail
    Newer Posts
    Older Posts