How Schools Can Prevent a Cyberattack

Schools are an increasingly popular and vulnerable target for hackers. Fishing attempts, ransomware demands, and data breaches are becoming more and more common. Schools store tons of sensitive data and have countless students and staff accessing their systems both during and after school hours. On top of that, K12 instruction is now more reliant than ever on advanced digital tools that live in the cloud. Cyber attacks on schools can be frustrating and costly for three big reasons. First, schools can lose days or even weeks of learning. Second, it can cost thousands of dollars to respond effectively to a cyber attack. And third, cyber attacks can break down trust between schools and their communities. The bad news is that cyber security experts predict cyber attacks against schools are likely to increase in frequency, especially as hackers use AI to carry out those attacks. The good news is there are steps schools can take to protect themselves. One, make sure to thoroughly examine a company's cyber security and data privacy procedures before using its products. Be explicit in the contract language about what the expectations are when the company's products experience an attack. Two, take stock of all the tech tools the district is using and make sure to conduct what experts call a risk assessment to identify and understand their possible vulnerabilities. Three, implement cyber security best practices such as requiring multiffactor authentication, regularly backing up data and storing it offline, and joining information sharing forums. Perhaps most importantly, train students and staff on best practices. People are the biggest cyber security vulnerability, experts say. Four, establish an incident response plan in the event of a hack. This plan should include the steps the district will take to respond to the attack and how it will notify community members. Districts should be practicing this plan like they would a fire drill. Five, have a backup plan to ensure learning can continue if tech tools are disabled due to an attack. Make sure teachers are prepared to go old school if necessary. To learn more about how districts are preparing for and preventing cyber attacks, visit edweek.org.