A:

Is computer security so important that it requires your time and attention?

Well, let’s see… Have you written your speech for the TV news anchors parked outside after a reporter showed how easy it was to hack into your network and change student grades?

Bottom line: Find out what’s at risk and how vulnerable your schools—and you—are. Security is a relatively new—but now permanent—part of district management, and therefore part of your job.

Q:

What’s the worst that could happen?

A:

• Identity theft : stolen confidential information can jeopardize the safety and well being of students and staff.
• Financial loss : a virus attack in 2003 typically cost organizations 11 person days and $11,000, according to ICSA Labs’ annual survey. In August 2003 after a virus attack, Cleveland Public Schools needed 100 district employees to spend a weekend and many additional hours getting 30,000 computers at 130 sites up and running (source: Cleveland Plain Dealer 08/27/03).

Q:

Compared with other districts, how secure are we?

A:

• Quick check: First, get a sense of your district’s level of preparedness (to establish a basis of comparison) by asking your CTO or Tech Director these eight questions.
• Get the low-down: Second, ask your CTO or Tech Director to complete the District Security Checklist to get a rough sense of how your district compares to others. See also the District Security Rubric.

Q:

Can’t we just make a few changes and move on?

A:

If your district’s most critical vulnerabilities are systemic, quick fixes won’t work.

You CAN shut down the network to stop security problems, but you’ll push learning and operational efficiency back to the 1970s.

The short answer : No.

Q:

How much do I have to know about security?

A:

To determine if your security response is appropriate, you’ll need to know enough to:

• Ask the right questions
• Provide fiscal and policy support
• Communicate to students, staff, and the community

Q:

How much will it cost?

A:

Security hardware and software are likely to cause only a modest impact on your budget. Properly monitoring security, managing passwords, and maintaining all computers, however, will require a long-term commitment to systemic network improvements and full-time staff.

The good news : these improvements will increase reliability and support district educational and operational objectives.

Q:

How long will it take?

A:

A phased improvement plan can bring a seriously-deficient district into a relatively secure position in a few years, providing that consistent progress is maintained. Bear in mind that security concerns are constantly evolving. A strategic security plan must become part of the annual cycle of tasks, budgets, and responsibilities.

Q:

Not the right questions?

A:

If the questions in this list don’t represent your concerns, please add your question here.