Keeping it safe
With schools becoming increasingly connected and using devices in learning, it means they are vulnerable to cyberattacks and must ensure that they are completely secure, and resellers have a vital role in this.
Cybercrime is a threat to everyone today and educational establishments are as much targets as anyone else and need to invest in security as a result.
“Educational institutions are often targeted for two main reasons,” says Spencer Starkey, vice president EMEA at Sonicwall. “The first is they have access to a great number of people’s data from students to staff and the second is that they have a very large attack surface.
“There are many tactics that cybercriminals use to gain unlawful access to institutions within the education sector. One major concern is the rise in data breaches, whereby cybercriminals gain unauthorised access to sensitive information, leading to personal data exposure, financial fraud, identity theft and reputational damage. Ransomware attacks also pose a significant risk, entering the system and encrypting an institution’s data locking the users out until a ransom is paid. Such attacks can heavily disrupt operations, impacting teaching and learning for a significant period, particularly where more people learn online.
“Additionally, phishing and social engineering techniques are commonly used to trick staff and students into revealing sensitive information, resulting in unauthorised access to systems, data breaches and financial losses.
“The impact of cybercrime on educational institutions can be severe, therefore it is essential to prioritise cybersecurity measures, such as robust network security, employee training, data backups and incident response plans.”
Threats recognised
Spencer adds that educational establishments are increasingly recognising the need for robust security measures. “Over time, there has been a growing awareness of the potential risks due to recent high-profile cyberattacks targeting educational institutions that have garnered significant media attention.
“Additionally, data protection and privacy regulations, such as GDPR, have imposed legal obligations on educational institutions, forcing a greater focus on data security and breach prevention. Compliance with these regulations has prompted institutions to prioritise security measures and deepen their understanding of cybersecurity risks.”
There are a range of security solutions educational establishments should seek to get in place, Spencer adds. “Educational institutions should be looking at strengthening network security through the use of firewalls, intrusion detection systems and secure network configurations,” he says. “Regular patching and updates should be implemented to address known vulnerabilities in operating systems, software and applications. To prevent unauthorised access to systems and data, educational institutions should set up access controls and stronger methods of authentication, like multi-factor authentication (MFA) or biometrics. Security awareness training programs should be set up to better educate faculty, staff and students on best practices, such as recognising phishing attempts.”
Spencer adds that educational establishments should also consider developing an incident response plan to mitigate any security incidents. “Regular data backups should be performed to ensure data availability and recovery in the event of a ransomware attack or data breach,” he says. “Continuous monitoring and auditing, including the use of intrusion detection systems and log analysis, also help in identifying suspicious activities. Regular security audits and vulnerability assessments help maintain a proactive security posture.”
Increasing demand
Sam Manjarres, senior product marketing manager at WatchGuard Technologies, adds that there has been an increase in the need to protect and secure devices outside the traditional school network, given the rise in learning and working from home.
“We have seen an enormous increase in demand for providing comprehensive, but simple network security, secure Wi-Fi and endpoint protection solutions,” she says. “IT managers at educational establishments need a comprehensive network security platform with advanced firewall appliances and automated web filtering and malware detection services encrypted via HTTPS.”
Sam adds that, given that most network access within their perimeter occurs via Wi-Fi, they also need to have fully secure connectivity to their access points. “They also need advanced endpoint protection and detection and response technologies based on a zero-trust approach, so they can classify all binaries before they are executed and block threats,” she says.
Reseller considerations
Sam adds that the security of student data and complying with privacy regulations is another major consideration. “Keeping Children Safe in Education (KCSiE) statutory guidance requires educational institutions to implement solutions that directly protect against cyber threats and cyber bullying,” he says. “Features like content and URL filtering, as well as web blockers, are key features that ensure appropriate internet usage and enable secure remote access for staff and students.”
She adds that implementing a secure, easily manageable MFA service to access all educational platforms and apps is also important. “Many SaaS platforms already require MFA, plus the use of mobile educational platforms is growing,” she says.
Sam says that is it important that resellers understand the specific needs and challenges educational establishments have. “It is crucial to highlight the benefits of the products in addressing cybersecurity concerns, enabling secure remote learning and providing reliable network performance,” she says. “Demonstrating compliance with regulatory requirements, offering competitive pricing, providing training and support services and emphasising the ease of deployment and management can also enhance the value proposition for key buyers.”
Spencer adds that resellers can act as trusted advisors to educational establishments, guiding them through the process of selecting, implementing and maintaining effective cybersecurity solutions. “The partnership between resellers and schools/universities helps to create a secure digital environment that protects sensitive data, ensures operational continuity and fosters a safe learning environment for students and faculty,” he says.
Future
In the coming years, the education sector will continue to integrate new technology, which means that demand for security solutions will continue to increase, Sam adds. “This industry needs security solutions that empower educators to deliver an inclusive learning experience,” she says. “Access control, asset protection, identity security and securing endpoints are only a few of the solutions required to enable a reliable learning environment.
“Bring Your Own Device is a common occurrence at most schools, making networks more vulnerable. At WatchGuard, we are paying special attention to delivering straightforward unified solutions and focusing on the KCSiE regulation.”