Ķvlog

Privacy & Security

Schools Need to Practice Cyberattack Defense ‘Like Fire Drills’

By Lauraine Langreo — June 27, 2023 2 min read
Photo of instructor giving lesson.
  • Save to favorites
  • Print
Email Copy URL

Schools’ use of digital tools has taken off in recent years, making them more likely to be the target of increasingly sophisticated cyberattacks.

The problem is, many K-12 technology leaders don’t feel adequately prepared to defend their networks.

That is the case even though cyberattacks can cause major disruptions to teaching and learning, and to administrative functions in a school district. The attacks can also put sensitive data about students and employees at risk.

In a June 26 panel discussion that I moderated at the International Society for Technology in Education conference, three experts discussed what district leaders can do to ensure they are prepared for cyberattacks and that students and staff are using digital tools safely.

The panelists were Mohit Gupta, the manager of products for the digital learning platform Clever; Elizabeth Hoover, the chief technology officer for the Alexandria City Public Schools in Virginia; and Merve Lapus, the vice president of education outreach for Common Sense, a nonprofit that promotes the development of digital and media literacy skills.

Cybersecurity plans should address key questions

Because more and more districts are the targets of cyberattacks, it’s important for district leaders to be prepared for that possibility.

Even districts that have all the guardrails in place could still get targeted, Gupta said, so what’s important is “making sure that we are planning for what happens when things don’t go right.”

Some questions that district technology leaders should think about include:

  • What do you do immediately?
  • Whom do you contact?
  • What are the possible remediation steps?

And then, cybersecurity plans need to be practiced “like fire drills,” Gupta said. “If you’re never acting on a plan, and it’s only this document sitting in one place, the moment you need it, nobody is going to be able to find it or know what to do with it.”

For example, the Alexandria, Va., school district has a cyber incident response team. The team members come from different positions within the district and are not cybersecurity experts, but they’re the people who know what to do in the event of a cyberattack, Hoover said. They’re the ones who know whom to call for help—cybersecurity insurance and lawyers, for example—when an attack happens.

How generative AI will affect districts’ cybersecurity

Cyber criminals are already using artificial-intelligence-powered tools more than ever before, Gupta said. So how should schools use these tools?

“I hope we have a culture that when new technology comes in, we explore it and examine it, and understand it and how it can be used,” Hoover said.

Her district is already discussing how to approach these emerging technologies, how to secure the data those tools are collecting, and how to engage the community in the process.

Lapus agreed that schools need to be “thoughtful, but not necessarily be fearful” about these emerging technologies.

What’s important for Ķvlog to understand is where the AI tools are getting their information from and what the possible biases are behind that information.

“For schools, the depth and breadth of technology when it’s no longer a choice and everybody gets to use it is a huge reason why cybersecurity has suddenly become so important,” Gupta said. “We have to like catch up really fast and train everybody in a world where the value of the data is extremely high, which means that the attackers are much more motivated and have much more resources to get that data out.”

Related Tags:

Events

College & Workforce Readiness Webinar How High Schools Can Prepare Students for College and Career
Explore how schools are reimagining high school with hands-on learning that prepares students for both college and career success.
This content is provided by our sponsor. It is not written by and does not necessarily reflect the views of Education Week's editorial staff.
Sponsor
School Climate & Safety Webinar
GoGuardian and Google: Proactive AI Safety in Schools
Learn how to safely adopt innovative AI tools while maintaining support for student well-being. 
Content provided by 
Reading & Literacy K-12 Essentials Forum Supporting Struggling Readers in Middle and High School
Join this free virtual event to learn more about policy, data, research, and experiences around supporting older students who struggle to read.

EdWeek Top School Jobs

Teacher Jobs
Search over ten thousand teaching jobs nationwide — elementary, middle, high school and more.
Principal Jobs
Find hundreds of jobs for principals, assistant principals, and other school leadership roles.
Administrator Jobs
Over a thousand district-level jobs: superintendents, directors, more.
Support Staff Jobs
Search thousands of jobs, from paraprofessionals to counselors and more.

Read Next

Privacy & Security A New Digital Divide? Low-Income Students See More Ads in the Tech Their Schools Use
Students from the lowest-income families are the most likely to attend schools that do not systematically vet their education technology.
4 min read
Group of Students in IT Class
iStock
Privacy & Security Q&A Why One Tech Leader Prioritizes Explaining Student Data Privacy to Teachers
Jun Kim, the director of technology for an Oklahoma school district, helped build a statewide database of vetted learning platforms.
3 min read
Jun Kim, Director of Technology for Moore Public Schools, poses for a portrait outside the Center for Technology on Dec. 13, 2023 in Moore, Okla.
Jun Kim, is the director of technology for the Moore school district in Moore, Okla., He has made securing student data a priority for the district and the state.
Brett Deering for Education Week
Privacy & Security A Massive Data Leak Exposed School Lockdown Plans. What Districts Need to Know
More than 4 million records held by school safety software company Raptor Technologies were left inadvertently exposed online.
5 min read
Concept image of security breach, system hacked alert with red broken padlock icon showing vulnerable access.
Nicolas Herrbach/iStock/Getty
Privacy & Security As Cyberattacks Mount, Lawmakers Double Their Efforts to Protect Schools
But the legislative push is not matched by funds to build better cyber defenses.
2 min read
Conceptual illustration of computer with a pixelated lock on screen.
Nanzeeba Ibnat/iStock/Getty Images Plus