Bolstering School Cybersecurity: New Initiatives from the Government and the Industry Leaders
Key people in the government convened school administrators, educators and private sector companies to discuss best practices and new resources available to strengthen our schools’ cybersecurity.
As we increasingly rely on technology in education, the vulnerability of our schools to cyberattacks becomes all the more evident. The rising number of attacks on U.S. schools underscores the need for robust cybersecurity measures. Recognizing this urgency, the Biden-Harris Administration recently unveiled a comprehensive plan to combat these threats and safeguard the future of American education. Here’s a closer look.
The Cyber Threat Landscape
The 2022-23 academic year saw at least eight K-12 school districts grappling with significant cyberattacks. Four of these schools experienced temporary shutdowns. But the effects weren’t limited to disruptions in operations. These attacks have exposed sensitive information, including student grades, medical records, and even details about school security systems.
Moreover, the U.S. Government Accountability Office's 2022 report highlighted the severe consequences of such attacks. Beyond lost learning days, schools faced financial losses ranging from $50,000 to a staggering $1 million.
A Proactive Response
In a proactive response to these challenges, Secretary of Education Miguel Cardona, Secretary of Homeland Security Alejandro Mayorkas, and First Lady Jill Biden held a White House conference. The attendees included school administrators, educators, and private sector stakeholders, all unified in their goal: to strategize and pool resources to enhance school cybersecurity.
Key Measures Announced
The administration's countermeasures include:
Federal Communications Commission: A pilot program is on the horizon, intending to allocate up to $200 million over three years to bolster cyber defenses in schools and libraries.
U.S. Department of Education: The creation of a Government Coordinating Council (GCC) will see a united front across federal, state, and local educational leadership, ensuring schools are better prepared to prevent, respond to, and recover from cyber threats.
Joint Guidance: Together, the U.S. Department of Education and the Cybersecurity and Infrastructure Security Agency (CISA) are releasing guidance documents, ensuring educational leaders have the tools they need to reinforce their digital ecosystems.
CISA’s Training Initiatives: Expect a more cyber-aware educational sector as CISA commits to providing specific cybersecurity assessments, exercises, and training for 300 new K-12 entities.
Resources from FBI and National Guard Bureau: These agencies are simplifying cybersecurity incident reporting and ensuring schools can fully leverage federal defense capabilities.
Private Sector Steps Up
It's heartening to see the private sector stepping up alongside the government:
Amazon Web Services (AWS): Beyond a generous $20 million grant program, AWS is offering free security training and cyber incident response support.
Cloudflare: Smaller public school districts can look forward to free Zero Trust cybersecurity solutions.
PowerSchool: Schools across the U.S. can now access free and subsidized cybersecurity courses, tools, and resources.
Google: An updated "K-12 Cybersecurity Guidebook" has been released, aiding schools that rely on Google products.
D2L: This learning platform company is doubling down on security, providing new cybersecurity courses, extended security reviews, and third-party validations.
Conclusion
The initiatives announced by the Biden-Harris Administration signal a recognition of the challenges ahead and a commitment to addressing them head-on. As schools continue to embrace technology, these measures will be crucial in ensuring a safe, secure, and uninterrupted learning environment for all.
References
[1] https://www.whitehouse.gov/briefing-room/statements-releases/2023/08/07/biden-harris-administration-launches-new-efforts-to-strengthen-americas-k-12-schools-cybersecurity/