Privacy & Security

Schools Need to Practice Cyberattack Defense ‘Like Fire Drills’

By Lauraine Langreo — June 27, 2023 2 min read
Photo of instructor giving lesson.
  • Save to favorites
  • Print

Schools’ use of digital tools has taken off in recent years, making them more likely to be the target of increasingly sophisticated cyberattacks.

The problem is, many K-12 technology leaders don’t feel adequately prepared to defend their networks.

That is the case even though cyberattacks can cause major disruptions to teaching and learning, and to administrative functions in a school district. The attacks can also put sensitive data about students and employees at risk.

In a June 26 panel discussion that I moderated at the International Society for Technology in Education conference, three experts discussed what district leaders can do to ensure they are prepared for cyberattacks and that students and staff are using digital tools safely.

The panelists were Mohit Gupta, the manager of products for the digital learning platform Clever; Elizabeth Hoover, the chief technology officer for the Alexandria City Public Schools in Virginia; and Merve Lapus, the vice president of education outreach for Common Sense, a nonprofit that promotes the development of digital and media literacy skills.

Cybersecurity plans should address key questions

Because more and more districts are the targets of cyberattacks, it’s important for district leaders to be prepared for that possibility.

Even districts that have all the guardrails in place could still get targeted, Gupta said, so what’s important is “making sure that we are planning for what happens when things don’t go right.”

Some questions that district technology leaders should think about include:

  • What do you do immediately?
  • Whom do you contact?
  • What are the possible remediation steps?

And then, cybersecurity plans need to be practiced “like fire drills,” Gupta said. “If you’re never acting on a plan, and it’s only this document sitting in one place, the moment you need it, nobody is going to be able to find it or know what to do with it.”

For example, the Alexandria, Va., school district has a cyber incident response team. The team members come from different positions within the district and are not cybersecurity experts, but they’re the people who know what to do in the event of a cyberattack, Hoover said. They’re the ones who know whom to call for help—cybersecurity insurance and lawyers, for example—when an attack happens.

How generative AI will affect districts’ cybersecurity

Cyber criminals are already using artificial-intelligence-powered tools more than ever before, Gupta said. So how should schools use these tools?

“I hope we have a culture that when new technology comes in, we explore it and examine it, and understand it and how it can be used,” Hoover said.

Her district is already discussing how to approach these emerging technologies, how to secure the data those tools are collecting, and how to engage the community in the process.

Lapus agreed that schools need to be “thoughtful, but not necessarily be fearful” about these emerging technologies.

What’s important for educators to understand is where the AI tools are getting their information from and what the possible biases are behind that information.

“For schools, the depth and breadth of technology when it’s no longer a choice and everybody gets to use it is a huge reason why cybersecurity has suddenly become so important,” Gupta said. “We have to like catch up really fast and train everybody in a world where the value of the data is extremely high, which means that the attackers are much more motivated and have much more resources to get that data out.”


School Climate & Safety K-12 Essentials Forum Strengthen Students’ Connections to School
Join this free event to learn how schools are creating the space for students to form strong bonds with each other and trusted adults.
This content is provided by our sponsor. It is not written by and does not necessarily reflect the views of Education Week's editorial staff.
IT Infrastructure & Management Webinar
Future-Proofing Your School's Tech Ecosystem: Strategies for Asset Tracking, Sustainability, and Budget Optimization
Gain actionable insights into effective asset management, budget optimization, and sustainable IT practices.
Content provided by Follett Learning
This content is provided by our sponsor. It is not written by and does not necessarily reflect the views of Education Week's editorial staff.
Budget & Finance Webinar
Innovative Funding Models: A Deep Dive into Public-Private Partnerships
Discover how innovative funding models drive educational projects forward. Join us for insights into effective PPP implementation.
Content provided by Follett Learning

EdWeek Top School Jobs

Teacher Jobs
Search over ten thousand teaching jobs nationwide — elementary, middle, high school and more.
View Jobs
Principal Jobs
Find hundreds of jobs for principals, assistant principals, and other school leadership roles.
View Jobs
Administrator Jobs
Over a thousand district-level jobs: superintendents, directors, more.
View Jobs
Support Staff Jobs
Search thousands of jobs, from paraprofessionals to counselors and more.
View Jobs

Read Next

This content is provided by our sponsor. It is not written by and does not necessarily reflect the views of Education Week's editorial staff.
Privacy & Security Quiz
Quiz Yourself: How Much Do You Know About Cybersecurity For Schools And Districts?
Answer 6 questions about actionable cybersecurity solutions.
Content provided by FlexPoint Education Cloud
Privacy & Security A New Federal Taskforce Targets Cybersecurity in Schools
The “government coordinating council" aims to provide training, policies, and best practices.
3 min read
Illustration of computer and lock.
iStock / Getty Images Plus
Privacy & Security Q&A Why One Tech Leader Prioritizes Explaining Student Data Privacy to Teachers
Jun Kim, the director of technology for an Oklahoma school district, helped build a statewide database of vetted learning platforms.
3 min read
Jun Kim, Director of Technology for Moore Public Schools, poses for a portrait outside the Center for Technology on Dec. 13, 2023 in Moore, Okla.
Jun Kim, is the director of technology for the Moore school district in Moore, Okla., He has made securing student data a priority for the district and the state.
Brett Deering for Education Week
Privacy & Security A Massive Data Leak Exposed School Lockdown Plans. What Districts Need to Know
More than 4 million records held by school safety software company Raptor Technologies were left inadvertently exposed online.
5 min read
Concept image of security breach, system hacked alert with red broken padlock icon showing vulnerable access.
Nicolas Herrbach/iStock/Getty