At Nova Scotia’s Conseil Scolaire Acadien Provincial (CSAP), cybersecurity is taken seriously. In collaboration with the province’s Department of Education and Early Childhood Development and other provincial school boards, robust measures are in place to protect networks against cyberattacks.
Cybersecurity is a crucial element in the protection of personal data and systems, particularly in the school environment. Cyber threats are constantly evolving, and it’s essential to be proactive in implementing good security practices.
In the field, IT technicians in our schools are an essential component against cyberattacks. They have in-depth knowledge of potential threats and vulnerabilities. Here is some practical advice from our IT staff on the best cybersecurity habits to adopt.
- For confidentiality, avoid including the student’s full name in the subject line. Use initials instead. By following this effectively with parents and other school staff.
Example: Instead of “Behavioural Report for Lucie Michaud”, use “Report L. M.” as the subject line.
- Beware of certain emails. Don’t open attachments or links from suspicious email addresses or messages. Some emails and websites may appear legitimate. If in doubt, contact the person who sent you the email or contact your technical department. You should always use the email address provided by your employer.
Example: A suspicious email sent to your inbox from a member of staff containing a link to an interesting resource. By clicking on the malicious link, the hacker can take control of your email account, steal sensitive information and even spread malware over the network.
- Don’t use your work email for personal purposes. Business email is reserved for professional communications, and personal email for private communications.
Passwords
Good examples: Ducky3flying7! @, NorthGBzoomango81$.
- Strong, unique passwords are essential. They should be made up of upper and lowercase letters, numbers, and symbols. Don’t reuse the same passwords for different accounts, and consider using a password manager to help you remember them.
- One practice to avoid is putting the student’s username and password on their computer. Another student could steal the login and use the student’s account to access their personal data.
Software and Applications
- Update software and systems regularly. Make sure your operating systems, applications and antivirus software are always up-to-date with the latest security patches.
Do: Restart your computer to install daily updates. Want to keep your tabs? Pin them in your browser.
Data Backup
- Back up your data daily. By backing up your important data and storing it in a secure location, such as a cloud space, you ensure that you won’t have a problem if a hacker takes control of your computer or if it gets stolen.
Do: Use Google Drive, Microsoft’s OneDrive, etc.
Sensitive Information
- Implement the principle of least privilege to limit data access. This is the principle that a user account should only have the access rights necessary to perform its tasks and nothing more.
Office Equipment
- Office equipment is used for work, and personal use should be avoided. It should not be used for personal travel.
- Make sure your devices are password-protected. Avoid using easily identifiable personal information.
Internet
- Disable notifications when you enter a site.
- Block cookies. This way, the sites you visit won’t track your online activities. Most won’t prevent you from visiting their site if you block them. You can also control them.
- Browse in Incognito mode in Chrome. Private browsing mode allows you to browse without leaving a trace on your device.
- Avoid unsecured public Wi-Fi networks where hackers could intercept your data.
Do: Take particular care when working at a café using a public Wi-Fi network.
Professional Development
- Keep up to date on the subject of cybersecurity, and take advantage of the training offered by your employer. For example, CSAP offers 20-minute synchronous virtual micro-trainings at the start of the day, during lunchtime and after school.
The best approach to cybersecurity is to be proactive and stay up to date. By taking the time to understand the risks and put appropriate safeguards in place, you can better protect your personal data and that of your students. And remember, better safe than sorry. If you have any doubts, contact your technician!