Reiterate the "Cybersecurity/Data privacy is a Team Sport" analogy. Too often even the Business Office assumes that the IT department alone will be able to protect the data.
Ransomware and identity theft are for-profit businesses. Groups are specifically targeting schools because they know we are soft targets (with some valuable data).
Remind them of the role that human error plays in hacks - over 80%. Independent schools are trusting, friendly places, but a greater level of skepticism will be required to combat social engineering against business offices.
The same way that robbers target banks, cyber criminals target the business office - because that's where the money is.
We know better now, but in the past they probably saved all sorts of documents that now need to be scrubbed for those old network storage drives - scans of passports or tax returns, anyone? Take some time to clear out storage, especially for employees who may have left years ago.
------------------------------
Bill Freitas, CISSP, CETL
------------------------------
Original Message:
Sent: 01-07-2023 05:26 PM
From: Christina Lewellen
Subject: What's critical for the business office to know about protecting student data?
Hey ATLIS community,
We're working on a new PD offering for our partners at NBOA that we'll roll out at NBOA's annual conference. I'll have an opportunity to share with the business office a few critical things they must be tracking when it comes to protecting student data. We won't get into the technical stuff -- that's for the tech team -- but we will provide a high-level overview of ways schools are going to have to protect student data in the coming years.
Please weigh in... If there was one thing you'd want your business office to know when it comes to the work you're doing to protect your community's data, what is it? We have an opportunity to educate our peers in the business office. What do they need to know??
Looking forward to hearing your thoughts. Happy 2023, friends!
Christina
#CybersafetyandDataSecurity
------------------------------
Christina Lewellen
ATLIS
WINCHESTER VA
------------------------------