Major Cybersecurity Threats and Challenges Schools are Facing Today

Recently our Co-Founder, Michele Gay, sat down for a Q&A session with Chris Noell, Senior Vice President of Product and Engineering for Raptor Technologies to discuss the many cybersecurity challenges schools face today. The following is an abridged version of the conversation.

Michele: Thanks for joining me today, Chris. I’m eager to hear your expert perspective on this often-overlooked aspect of school safety. Now that we find ourselves working, teaching, and learning in the cyber world, schools are dealing with significant challenges in cybersafety and cybersecurity. Some schools are sounding the alarm bells, others watching and waiting, and some are thinking, “Do I even need to worry about this?” What are your thoughts, Chris?

Chris: That’s a great question. I usually start with, “Are schools being attacked?” Unfortunately, the truth is that they are. In December 2020, the FBI, CISA–and a host of other leading organizations that monitor cybersecurity threats–published a statement warning K-12 schools of three major threats:

  • targeted ransomware attacks
  • theft of data, and
  • disruption of distance learning services.

To your point, schools are more online–and more reliant on technology than ever. Hackers are aware of that and now taking advantage of this new vulnerability. Experts have warned that incidents could increase 86% over this academic year. Even by standards in cybersecurity, that’s pretty astonishing and potentially devastating. So, whether your community has been hit or not, it’s time to take action to protect your school.

Michele: Unfortunately, for a lot of our school communities, it doesn’t become a pressing issue until it is already upon them. Of course, then they’re in a reactionary position. What resources are out there to help schools prepare for and prevent these kinds of threats and attacks?

Chris: The K-12 Cybersecurity Act of 2021 instructed CISA to study the risks that will impact K-12 school districts and develop cybersecurity guidelines and online training. You can visit CISA.gov to explore these resources.

As part of the security industry, we [Raptor Technologies] continually monitor the federal guidance, and then anchor the solutions and resources that we develop on those. While these guidelines are not mandatory—at the moment– it’s almost certain that they will become a standard of care.

 Michele: What are some of the practical things that schools can be doing to protect themselves? School leaders? Students, teachers, and staff members and so on?

Chris: We all have a role to play in securing our organizations. For the IT folks in the audience, I would say it starts with just understanding what you have in your district. What hardware do you have? What software do you have? What vendors have access to your network/do you rely on? Who do you share data with? It sounds really basic, but if you can’t answer those questions, you really can’t protect your environment. So start with that inventory.

 Any organization, especially an organization that may not have a lot of IT resources, should look to make this someone else’s problem as much as possible. What I mean by this is simply, wherever possible use software from reputable vendors whose products and services come with the highest levels security.

Michele: That’s really important for our school communities. IT resources are limited if present at all. And this kind of expertise is not readily available in house. I mean, our schools are run by educators!

Chris: You’re absolutely right. Another important thing for school leaders to consider about cybersecurity (as opposed to physical security) is that technology and related threats evolve at a much more rapid rate, meaning we have to update our tools and measures at a more rapid pace. With cybersecurity, there are tens of thousands of new vulnerabilities discovered every year. So just because it was secure yesterday doesn’t mean it’s going to be secure tomorrow. That really is the biggest headache and concern.

Michele: Truly. But our schools house some of the most precious data, about the most precious people that we have in our communities–in our country–so these issues are not to be ignored.

Chris: For sure. I think at the end of the day, you’re never going to have 100% security. The NSA, the CIA, even they don’t have 100% security. The reality is, once you have a computer, you have a risk. So, it’s really about how you manage that risk, just like all the other risks in life.

Michele: Not being afraid to face–and talk about–those risks and vulnerabilities is important too. I think some of our school communities tend to want to keep those things quiet, but we really need to shine a light on these issues if we are to be proactive. Right?

Chris: Absolutely. And although it can seem a bit overwhelming, I’ll refer back to something I’ve heard you say many times before, “It’s not rocket science.”

I think a lot of people look at security like it’s some kind of dark art. As though it involves some kind of mystical expertise. But it’s just basic blocking and tackling, an operational IT discipline, just like managing availability and performance is an operational IT discipline. So I would encourage people to be open about where they’re at and make steady progress over time.

Michele: Good advice. We’re not going to be perfect. When I talk about school safety, I emphasize that practice makes progress—not perfection.

And how about our kids–our students? They’re now major users of technology, of online education, of social media, all those things. So how about education for our students? I see that as a valuable way to help protect our schools and our children.

Chris: That’s a fantastic point because there are multiple values there. Educating students in cybersafety not only protects the institution, but certainly extends protection over our students when they leave the campus, go to their home networks, and interact online. They’re exposed to all the same sorts of attacks off campus as they are on campus.

Michele: So just like we talk about life skills of safety in the broader context of school safety, it’s the same thing here, right? We want our students, we want our staff and community members to have those life skills, not just for safety within the building and on campus, but as they go out into the world, as they go home, as they go into the workplace.

Chris: Yes, these are the new realities of keeping our schools and communities safe in a digital world.

Michele: Chris, I so appreciate you taking some time to share your professional perspective with us.

Chris: Yes, thank you. I’m glad that we could take some time today to talk about a really important topic.

Michele: Thank you for all that you do. And thank you to Raptor for letting us borrow you today! We are grateful for the support you all provide to of so many of our school communities and our mission at Safe and Sound Schools.

/by

Participating in School Safety Drills as a Person with Autism

We are thrilled to feature this blog from one of our favorite writers!  Jeff Snyder is a neurodiversity advocate, speaker, and writer who shares his personal journey and experiences as a person with autism.  This eye-opening piece from Jeff teaches about the challenges of participating in school safety drills as a person with autism and provides advice on “being your best advocate,” as well as practical accommodations for students with sensory processing issues.

Let’s be real…fire drills are very bothersome and disruptive to autistic people. In fact, when I was in school, fire drills and other loud noises that are part of school life bothered me greatly. To be real, fire drills are important because their purpose is to prepare students and teachers, or anyone for that matter, for what happens when there is a real fire.

But I had a safety net when it came to the drills. It was put in my IEP that I would be taken out of the building before the fire alarm was pulled. This gave me the chance to get to know my town’s fire department on a personal level.

Now, while I had this safety net in place throughout my education, some others did not, either because the schools felt that the student needed to be prepared along with the rest of the school or maybe because some autistic students weren’t bothered by the loud noise.

For those who are bothered by fire alarms, they have a very good reason. Some indviduals are diagnosed with what is known as Sensory Processing Disorder or SPD, which makes it difficult for them to process loud noises or other uncomfortable situations.

But, it’s not just the noise.

There is also the matter that fire drills happen right out of the blue. Some autistic people like myself like to know when things are going to be happening, such as fire drills so we can mentally prepare ourselves for when it arrives. If you want to know if there is a fire drill scheduled, just say to your child’s teacher or principal that you just want a heads up for any scheduled fire drills.

If you feel that the student needs to go through the drill, teachers should have noise cancelling headphones on standby to reduce the noise level. This also applies to other situations where loud noises occur, such as with school assemblies. I will talk about this in the next blog!

It’s also worth noting that fire drills can happen in the workplace too, so if you wish to get an accommodation from your employer to get a heads up too, by all means request the accommodation.

/by