Protecting a district or a school from online risks is not an easy task. Sensitive information needs to be accessible and protected at the same time. I find saying "accessible" and "protected" in the same sentence interesting, as they are very contradictory words. Sort of like the words "tender" and "flakey" when we describe pie crusts.
Yet, after having a pie from my brother-in-law, I know it is possible. That said, it is also possible with security to be accessible and protected.
How?
Train and raise the awareness of your staff. Security systems are only part of the solution. By training your staff on password practices, phishing and other social engineering attacks, your organization will be that more savvy.
Because of the Pandemic, schools are targeted more than before. Cyber attacks have gone up 600% due to COVID19 and 98% of the attacks involve social engineering. There are tons of interesting security courses out there too to help educate your staff.
After spending the a couple of weeks and reviewing the curriculum and reviewing all of the training modules (30+), IT Weapons package offered a comprehensive security training curriculum for staff that is not only fun but bundled with password enumeration reports, 2FA, penetration tests, etc. The staff here received it well and the uptake is over 90% compliance in the course.
Worth checking out.
Comments
Post a Comment