Ķvlog

Privacy & Security

Schools Need to Practice Cyberattack Defense ‘Like Fire Drills’

By Lauraine Langreo — June 27, 2023 2 min read
Photo of instructor giving lesson.
  • Save to favorites
  • Print
Email Copy URL

Schools’ use of digital tools has taken off in recent years, making them more likely to be the target of increasingly sophisticated cyberattacks.

The problem is, many K-12 technology leaders don’t feel adequately prepared to defend their networks.

That is the case even though cyberattacks can cause major disruptions to teaching and learning, and to administrative functions in a school district. The attacks can also put sensitive data about students and employees at risk.

In a June 26 panel discussion that I moderated at the International Society for Technology in Education conference, three experts discussed what district leaders can do to ensure they are prepared for cyberattacks and that students and staff are using digital tools safely.

The panelists were Mohit Gupta, the manager of products for the digital learning platform Clever; Elizabeth Hoover, the chief technology officer for the Alexandria City Public Schools in Virginia; and Merve Lapus, the vice president of education outreach for Common Sense, a nonprofit that promotes the development of digital and media literacy skills.

Cybersecurity plans should address key questions

Because more and more districts are the targets of cyberattacks, it’s important for district leaders to be prepared for that possibility.

Even districts that have all the guardrails in place could still get targeted, Gupta said, so what’s important is “making sure that we are planning for what happens when things don’t go right.”

Some questions that district technology leaders should think about include:

  • What do you do immediately?
  • Whom do you contact?
  • What are the possible remediation steps?

And then, cybersecurity plans need to be practiced “like fire drills,” Gupta said. “If you’re never acting on a plan, and it’s only this document sitting in one place, the moment you need it, nobody is going to be able to find it or know what to do with it.”

For example, the Alexandria, Va., school district has a cyber incident response team. The team members come from different positions within the district and are not cybersecurity experts, but they’re the people who know what to do in the event of a cyberattack, Hoover said. They’re the ones who know whom to call for help—cybersecurity insurance and lawyers, for example—when an attack happens.

How generative AI will affect districts’ cybersecurity

Cyber criminals are already using artificial-intelligence-powered tools more than ever before, Gupta said. So how should schools use these tools?

“I hope we have a culture that when new technology comes in, we explore it and examine it, and understand it and how it can be used,” Hoover said.

Her district is already discussing how to approach these emerging technologies, how to secure the data those tools are collecting, and how to engage the community in the process.

Lapus agreed that schools need to be “thoughtful, but not necessarily be fearful” about these emerging technologies.

What’s important for Ķvlog to understand is where the AI tools are getting their information from and what the possible biases are behind that information.

“For schools, the depth and breadth of technology when it’s no longer a choice and everybody gets to use it is a huge reason why cybersecurity has suddenly become so important,” Gupta said. “We have to like catch up really fast and train everybody in a world where the value of the data is extremely high, which means that the attackers are much more motivated and have much more resources to get that data out.”

Related Tags:

Events

College & Workforce Readiness Webinar How High Schools Can Prepare Students for College and Career
Explore how schools are reimagining high school with hands-on learning that prepares students for both college and career success.
This content is provided by our sponsor. It is not written by and does not necessarily reflect the views of Education Week's editorial staff.
Sponsor
School Climate & Safety Webinar
GoGuardian and Google: Proactive AI Safety in Schools
Learn how to safely adopt innovative AI tools while maintaining support for student well-being. 
Content provided by 
Reading & Literacy K-12 Essentials Forum Supporting Struggling Readers in Middle and High School
Join this free virtual event to learn more about policy, data, research, and experiences around supporting older students who struggle to read.

EdWeek Top School Jobs

Teacher Jobs
Search over ten thousand teaching jobs nationwide — elementary, middle, high school and more.
Principal Jobs
Find hundreds of jobs for principals, assistant principals, and other school leadership roles.
Administrator Jobs
Over a thousand district-level jobs: superintendents, directors, more.
Support Staff Jobs
Search thousands of jobs, from paraprofessionals to counselors and more.

Read Next

Privacy & Security Twitter Chat April 9 to Focus on CTO Needs Around Cybersecurity
Tune in to the #edCTOchat on April 9 at 2 p.m. ET for more information about how to fend off K-12 cybersecurity threats and how to handle attacks when they come.
1 min read
Privacy & Security The Best Defense Against Cyberattacks, From a District CTO
Melissa Tebbenkamp, the director of instructional technology for the Raytown Quality Schools near Kansas City, says her district's biggest cybersecurity risk is "ourselves."
10 min read
BRIC ARCHIVE
Getty
Privacy & Security 6 Steps for Preventing and Cleaning Up Cyberattacks
Learn about common-sense measures you can put in place to protect your district against a rising mix of cyber threats facing K-12 schools.
4 min read
Conceptual image showing varying shades of blue and white numbers representing data and a lock with a computer's power button inside the lock's key hole.
Vitalii Gulenok/iStock/Getty Images Plus
Privacy & Security K-12 Cybersecurity Lessons Learned From 'Constant Barrage of Attacks'
In North Dakota alone, the state network used by K-12 schools, state universities, and other public agencies experiences 5.7 million known cyberattacks every month.
7 min read
Library Media Specialist Stacy Olson shows kindergarteners at Rita Murphy Elementary School in Bismarck, N.D., how to draw a circle using small, handheld robots called Ozobots that move and follow a marker line.
Library Media Specialist Stacy Olson shows kindergarteners at Rita Murphy Elementary School in Bismarck, N.D., how to draw a circle using small, handheld robots called Ozobots that move and follow a marker line.
Kristina Barker for Education Week