Watch the RecordingListen to the Podcast

This edLeader Panel is presented by CoSN and AASA.
Sponsored by ClassLink

As school technology gets more sophisticated, so do cybercriminals, but school leaders can’t sit back and wait for someone to hand them solutions. During the edLeader Panel “Cybersecurity in School District Settings: A District Leadership Approach,” three innovative superintendents discussed strategies to try and stay ahead of cyber issues even when the landscape is constantly evolving.

First, school leaders should educate not just their fellow administrators but all staff-liability issues surrounding technology (this includes all support staff.) Schools are liable for all data breaches, whether the criminal accesses the information via an academic program, the HVAC system, or an app downloaded to a personal computer connected to the network.

Rather than giving staff a blanket commandment, though, explain to them how a criminal can use vulnerabilities in software to attack your system. Give them the information they need to understand your school rules, as well as local and state laws, so that they become advocates for your cyber policies. They can also be your frontline eyes if they see a potential issue.

Next, while school officials need to make sure they are complying with those current laws, they also need to make sure they are keeping up with any new threats. It takes a while for laws to be passed, the superintendents noted, and the absence of a law doesn’t protect schools from liability if they know of an issue. Administrators have an ethical obligation to constantly monitor, test, and update their security measures. Sometimes, guidance may come from insurance companies or other business partners that require schools to do a security audit.

In addition, the superintendents suggested having outside groups test your technological infrastructure for vulnerabilities. While anti-virus software and firewalls are great tools, they are not invincible. Also, don’t forget to keep all software current as the patches often involve security updates.

Another great source of information comes from networking with administrators from other districts. No matter the number of schools or students in a district, they are using similar technology and face similar challenges. It’s difficult for administrators to stay up to date on everything, but by pooling knowledge, they can help each other stay ahead of issues.

Finally, administrators should have an action plan for when the inevitable happens. This plan should encompass everything from how the school will function during the incident and communicating the issue to the community to reports that need to be made to local officials. This plan should be jointly developed by the chief technology officer and the superintendent, but there should be input from all stakeholders, and each stakeholder should understand what they need to do when an incident occurs. Moreover, be open with any incidents that happen at your schools. You can actually build faith in your school and your processes if you’re open about what’s happening instead of trying to cover it up.

In the end, the superintendent needs to instill confidence in the community about the ability to monitor and mitigate cyber issues—and that can only be done when the superintendent understands the possibilities and feels like they have a firm grasp on the issues. Begin with educating yourself and working with your chief technology officer before there are any problems. Together, you can develop a culture that focuses on being proactive and not reactive.

Learn more about this edWeb broadcast, Cybersecurity in School District Settings: A District Leadership Approach, presented by CoSN and AASA, and sponsored by ClassLink.

Watch the RecordingListen to the Podcast

Join the Community

Super-Connected is a free professional learning community for school superintendents, district leadership, and aspiring district leaders.

AASA is the premier association for school system leaders and serves as the national voice for public education and district leadership on Capitol Hill.

CoSN (the Consortium for School Networking) is the premier professional association for school system technology leaders. CoSN provides thought leadership resources, community, best practices and advocacy tools to help leaders succeed in the digital transformation. CoSN represents over 13 million students in school districts nationwide and continues to grow as a powerful and influential voice in K-12 education.

ClassLink is a global education provider of identity and analytics products that create more time for learning and help schools better understand digital engagement. As leading advocates for open data standards, we offer instant access to apps and files with single sign-on, streamline class rostering, automate account provisioning, and provide actionable analytics. ClassLink empowers 19 million students and staff in over 2,500 school systems. Visit classlink.com to learn more.

Article by Stacey Pusey, based on this edLeader Panel