TLIS Objective 3.01

Develop policies and procedures

Schools are increasingly reliant on various vendors to provide essential services, ranging from educational software to data management systems. With this reliance comes the critical responsibility of ensuring that these vendors adhere to stringent privacy, security, and compliance standards.

Throughout the 1990s and early 2000s, schools all over the world were learning to adapt to the rise of the internet and the migration of many school processes from physical to electronic formats.

Schools face various risks that can significantly impact their operations, financial stability, and reputation.

It is easy to get lost in the realm of risk management. Whether applying it to the entire school in an Enterprise Risk Management program, or simply focusing on privacy and information security, managing risk can be a daunting task.

Imagine that one day the head of school receives an email from a colleague with an attachment or a link.

Between phones, laptops, tablets, and more, it’s easy to get stuck in the endless cycle of staring at our screens – especially for students. Social media is simply how students are social.

Developing a practical and effective cyber security plan is vital to incorporating security into your organization’s risk management strategy. A common misconception is that a cyber security plan is lengthy and difficult to follow. However, that does not have to be the case.

The proliferation of inexpensive (or expensive in some cases!) cloud-based solutions has allowed school data to roam freely across platforms, programs, and departments.