Virtual Event: Zero Trust Strategies Summit - Watch all Sessions
Connect with us

Hi, what are you looking for?

SecurityWeekSecurityWeek

Management & Strategy

New Legislation Aims to Strengthen Cybersecurity of K-12 Schools

Newly introduced bipartisan legislation aims to implement improved cybersecurity protections for K-12 educational institutions in the United States.

Newly introduced bipartisan legislation aims to implement improved cybersecurity protections for K-12 educational institutions in the United States.

Introduced by U.S. Senators Gary Peters (D-MI), ranking member of the Senate Homeland Security and Governmental Affairs Committee, and Rick Scott (R-FL), the K-12 Cybersecurity Act of 2019 demands the Department of Homeland Security (DHS) to identify risks and challenges that schools face and recommend solutions.

Education institutions, the senators argue, handle a large amount of sensitive records related to both students and employees, including grades, family information, medical histories, and employment information, and they require strong cyber protections to ensure this data is safe.

“Schools across the country are entrusted with safeguarding the personal data of their students and faculty, but lack many of resources and information needed to adequately defend themselves against sophisticated cyber-attacks,” Senator Peters said.

The new legislation, the senators say, will help ensure that schools across the country will be able to protect themselves from hacking, thus keeping the information of both students and educators secure.

Cyberattacks targeting schools have become increasingly common over the past several years. Recently, the state of Louisiana declared an emergency in response to such incidents, and schools in Arizona were closed. Last year, the Johannesburg-Lewiston Area schools in Michigan were targeted with ransomware.

Advertisement. Scroll to continue reading.

The K-12 Cybersecurity Act of 2019 instructs DHS’s Cybersecurity and Infrastructure Security Agency (CISA) to partner with other federal departments and private sector organizations to perform an assessment of the cybersecurity risks that are specific to K-12 educational institutions.

After that, CISA should come up with a set of recommendations to help schools strengthen their cybersecurity posture, as well as to develop an online toolkit to assist them in this regard. These tools would become available via the DHS website with other school safety information, the legislation demands.

“While technology can be a powerful classroom tool to enhance and supplement, not supplant, student learning and the work of educators, strict, enforceable privacy safeguards are so important to make sure our schools remain safe from cyber threats like data breaches, ransomware, and email scams. The K-12 Cybersecurity Act of 2019 will allow DHS to study the depth and scope of these risks to help safeguard our schools so educators and students can use technology with limited risk for years to come,” Randi Weingarten, president of the American Federation of Teachers, commented.

Related: New Legislation Would Block US Firms From Storing Personal Data in China, Russia

Related: Bipartisan Legislation to Require DHS Alerts on Election Hacking

Related: Legislation Would Stiffen Penalties for Ransomware Attacks

Written By

Ionut Arghire is an international correspondent for SecurityWeek.

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing for the latest cybersecurity threats, trends, and expert insights.

Click to comment

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.

AI tools connected to Google Workspace can access millions of sensitive emails and files. Join this session to uncover your organization’s risk and learn a framework to manage AI access.

Register

Join as we decipher the world of zero trust and share war stories on securing an organization by eliminating implicit trust and continuously validating every stage of a digital interaction.

Register

People on the Move

Randy Resnick has joined IGEL as Field CTO.

Darktrace has named Adam Towns as CFOO, Mike McGuinness as CRO, and Beth Shea as CCO.

Acronis has appointed Gerald Caron as CISO.

More People On The Move

Expert Insights

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest cybersecurity news, threats, and expert insights. Unsubscribe at any time.