The Cybersecurity and Infrastructure Security Agency (CISA) released a guide for K-12 schools and school districts to help prevent, mitigate and respond to cyber threats.
The K-12 Cybersecurity Foundations Resource Package gives schools and their districts tools to deal with the prevalent cyber threats. Based on current best practices and frameworks, the resource package provides cost-effective, actionable, and customizable steps for K-12 institutions to run effective cybersecurity programs.
“Cyberattacks on K-12 schools and districts jeopardize not only the integrity of our educational mission, but the safety and security of our students and teachers as well. These impacts are often felt well beyond the classroom,” CISA Acting Director Nicholas Anderson said. “The K-12 Cybersecurity Foundations Resource Package empowers school communities with practical strategies and supports our school safety mission. CISA is helping the K-12 community proactively defend against cyber threats, minimize disruption and better protect the systems our nation’s children, parents and educators depend on every day.”
The agency said that cyber threats against schools and school districts are growing and that the institutions must maintain their security measures to protect sensitive student and staff data, while relying on diverse technologies and systems, and utilizing multiple users with varying privileges and levels of access. Cyber incidents can disrupt learning and school operations, compromise student and staff privacy and safety, and take up time, money and resources.
CISA officials said the resource package was developed in response to those threats and to help K-12 school and district personnel understand cyber risks, and implement cybersecurity best practices. The package includes resources tailored for school leaders and non-technical staff, as well as cybersecurity and IT professionals.
Specifically, the guide outlines cybersecurity practices organized around protecting login credentials, safeguarding devices and assets, testing backups, strengthening incident response capabilities, improving cybersecurity training, enacting policies to manage data, aligning investments, and developing long-term plans.
“K-12 cybersecurity has evolved beyond an IT department concern and must now be recognized as a fundamental pillar of school safety and security,” CISA Acting Executive Assistant Director for Infrastructure Security Scott Breor. “The K-12 Cybersecurity Foundations Resource Package provides a roadmap for schools and districts to increase cyber awareness, evaluate current defenses and strengthen cyber resilience in the face of a growing and evolving threat landscape.”