skip to main content
US FlagAn official website of the United States government
dot gov icon
Official websites use .gov
A .gov website belongs to an official government organization in the United States.
https lock icon
Secure .gov websites use HTTPS
A lock ( lock ) or https:// means you've safely connected to the .gov website. Share sensitive information only on official, secure websites.


Title: Examination of Cybersecurity Technologies, Practices, Challenges, and Wish List in K-12 School Districts
With the growth in digital teaching and learning, there has been a sharp rise in the number of cybersecurity attacks on K-12 school networks. This has demonstrated a need for security technologies and cybersecurity education. This study examined security technologies used, effective security practices, challenges, concerns, and wish list of technology leaders in K-12 settings. Data collected from 23 district websites and from interviews with 12 district technology leaders were analyzed. Top security practices included cloud-based technologies, segregated network/V-LAN, two-factor authentication, limiting access, and use of Clever or Class Link. Top challenges included keeping users informed, lack of buy-in from staff and decision-makers, lack of expertise to implement modern best practices, and cost of resources. Top concerns included possible cyberattacks, leaked student data, and lack of user awareness. Finally, their wish list included technology personnel, access to Clever of Class Link, external system diagnostic checks, professional development for staff, and replacing aging infrastructure. The findings have implications for K-12 administrators, technology leaders, and teachers.  more » « less
Award ID(s):
2309400
PAR ID:
10433818
Author(s) / Creator(s):
Date Published:
Journal Name:
Journal of cybersecurity education research practice
Volume:
2023
Issue:
1
ISSN:
2472-2707
Page Range / eLocation ID:
Article 8
Format(s):
Medium: X
Sponsoring Org:
National Science Foundation
More Like this
  1. Increased use of technology in schools raises new privacy and security challenges for K-12 students---and harms such as commercialization of student data, exposure of student data in security breaches, and expanded tracking of students---but the extent of these challenges is unclear. In this paper, first, we interviewed 18 school officials and IT personnel to understand what educational technologies districts use and how they manage student privacy and security around these technologies. Second, to determine if these educational technologies are frequently endorsed across United States (US) public schools, we compiled a list of linked educational technology websites scraped from 15,573 K-12 public school/district domains and analyzed them for privacy risks. Our findings suggest that administrators lack resources to properly assess privacy and security issues around educational technologies even though they do pose potential privacy issues. Based on these findings, we make recommendations for policymakers, educators, and the CHI research community. 
    more » « less
  2. K-12 schools utilize a growing number of technologies to operate effectively, ranging from technologies for learning to technologies that manage student and personnel data. We share findings from an analysis of 23 school district websites for technologies used in a number of K-12 school districts surrounding a public, research university in a southeast region of the United States. In addition, we also share findings on technologies used in K-12 school districts from interviews with 12 technology directors. We propose a technology classification framework including educational technologies, management technologies, support technologies, networking technologies, and security technologies in addition to identifying various technologies that are currently used by school districts based on this framework. This framework has implications for K-12 technology adoption and clarifying the roles of school technology personnel. 
    more » « less
  3. CYBERSECURITY AND LOCAL GOVERNMENT Learn to secure your local government’s networks with this one-of-a-kind resource In Cybersecurity and Local Government, a distinguished team of researchers delivers an insightful exploration of cybersecurity at the level of local government. The book makes a compelling argument that every local government official, elected or otherwise, must be reasonably knowledgeable about cybersecurity concepts and provide appropriate support for it within their governments. It also lays out a straightforward roadmap to achieving those objectives, from an overview of cybersecurity definitions to descriptions of the most common security challenges faced by local governments. The accomplished authors specifically address the recent surge in ransomware attacks and how they might affect local governments, along with advice as to how to avoid and respond to these threats. They also discuss the cybersecurity law, cybersecurity policies that local government should adopt, the future of cybersecurity, challenges posed by Internet of Things, and much more. Throughout, the authors provide relevant field examples, case studies of actual local governments, and examples of policies to guide readers in their own application of the concepts discussed within. Cybersecurity and Local Government also offers: A thorough introduction to cybersecurity generally, including definitions of key cybersecurity terms and a high-level overview of the subject for non-technologists. A comprehensive exploration of critical information for local elected and top appointed officials, including the typical frequencies and types of cyberattacks. Practical discussions of the current state of local government cybersecurity, with a review of relevant literature from 2000 to 2021. In-depth examinations of operational cybersecurity policies, procedures and practices, with recommended best practices. Perfect for local elected and top appointed officials and staff as well as local citizens, Cybersecurity and Local Government will also earn a place in the libraries of those studying or working in local government with an interest in cybersecurity. 
    more » « less
  4. The demand to provide high-quality computer science (CS) education to K-12 students across the United States continues to grow due to societal transformations driven by AI and cybersecurity. However, the impact of state initiatives and mandates on district leaders’ decision making remains an under-explored area in the literature. In 2022, CSforALL began work in Tennessee, a state poised to enact CS education policy, as part of a Research Practice Partnership (RPP). This study investigates the first eight school districts who participated in the Strategic CSforALL Resource and Implementation Planning Tool (SCRIPT) workshops in 2022 and 2023, setting goals based on the SCRIPT rubric. The study takes a general qualitative approach underpinned by the Capacity, Access, Participation, and Experience (CAPE) Framework [14] to develop a coding scheme analyzing the districts’ related rubric scores and goals, and to investigate the impacts on equity indicators. The districts participated in three SCRIPT workshops held in 2022 and 2023, and this study dives deeply into the initial goals as well as analyzing the ways the SCRIPT rubric aligned to the CAPE Framework to investigate how district leaders make decisions which impact teacher and student outcomes which lead to equitable high-quality CS education. 
    more » « less
  5. Massachusetts defined K-12 Digital Literacy/Computer Science (DLCS) standards in 2016 and developed a 5-12 teacher licensure process, expecting K-4 teachers to be capable of teaching to the standards under their elementary license. An NSF CSforAll planning grant led to the establishment of an NSF 4-year ResearchPractice Partnership (RPP) of district and school administrators, teachers, university researchers, and external evaluators in 2018. The RPP focused on the 33 K-5 serving schools to engage all students in integrated CS/CT teaching and learning and to create a cadre of skilled and confident elementary classroom teachers ready to support their students in learning CS/CT concepts and practices. The pandemic exacerbated barriers and inequities across the district, which serves over 25,000 diverse students (9.7% white/nonHispanic, 83.7% high needs). Having observed a lack of awareness and expertise among many K-5 teachers for implementing CS/CT content and practices and seeing barriers to equitable CS/CT teaching and learning, the RPP designed an iterative, teacher-led, co-design of curriculum supported by equity-focused and embedded professional learning. This experience report describes how we refined our strategies for curriculum development and diffusion, professional learning, and importantly, our commitment to addressing diversity, equity, and inclusion beyond just reaching all students. The RPP broadened its focus on understanding race and equity to empower students to understand how technology affects their identities and to equip them to critically participate in the creation and use of technology 
    more » « less