Tag: districts

  • Resilient learning begins with Zero Trust and cyber preparedness

    Resilient learning begins with Zero Trust and cyber preparedness

    Key points:

    The U.K.’s Information Commissioner’s Office (ICO) recently warned of a surge in cyberattacks from “insider threats”–student hackers motivated by dares and challenges–leading to breaches across schools. While this trend is unfolding overseas, it underscores a risk that is just as real for the U.S. education sector. Every day, teachers and students here in the U.S. access enormous volumes of sensitive information, creating opportunities for both mistakes and deliberate misuse. These vulnerabilities are further amplified by resource constraints and the growing sophistication of cyberattacks.

    When schools fall victim to a cyberattack, the disruption extends far beyond academics. Students may also lose access to meals, safe spaces, and support services that families depend on every day. Cyberattacks are no longer isolated IT problems–they are operational risks that threaten entire communities.

    In today’s post-breach world, the challenge is not whether an attack will occur, but when. The risks are real. According to a recent study, desktops and laptops remain the most compromised devices (50 percent), with phishing and Remote Desktop Protocol (RDP) cited as top entry points for ransomware. Once inside, most attacks spread laterally across networks to infect other devices. In over half of these cases (52 percent), attackers exploited unpatched systems to move laterally and escalate system privileges.

    That reality demands moving beyond traditional perimeter defenses to strategies that contain and minimize damage once a breach occurs. With the school year underway, districts must adopt strategies that proactively manage risk and minimize disruption. This starts with an “assume breach” mindset–accepting that prevention alone is not enough. From there, applying Zero Trust principles, clearly defining the ‘protect surface’ (i.e. identifying what needs protection), and reinforcing strong cyber hygiene become essential next steps. Together, these strategies create layered resilience, ensuring that even if attackers gain entry, their ability to move laterally and cause widespread harm is significantly reduced.

    Assume breach: Shifting from prevention to resilience

    Even in districts with limited staff and funding, schools can take important steps toward stronger security. The first step is adopting an assume breach mindset, which shifts the focus from preventing every attack to ensuring resilience when one occurs. This approach acknowledges that attackers may already have access to parts of the network and reframes the question from “How do we keep them out?” to “How do we contain them once they are in?” or “How do we minimize the damage once they are in?”

    An assume breach mindset emphasizes strengthening internal defenses so that breaches don’t become cyber disasters. It prioritizes safeguarding sensitive data, detecting anomalies quickly, and enabling rapid responses that keep classrooms open even during an active incident.

    Zero Trust and seatbelts: Both bracing for the worst

    Zero Trust builds directly on the assume breach mindset with its guiding principle of “never trust, always verify.” Unlike traditional security models that rely on perimeter defenses, Zero Trust continuously verifies every user, device, and connection, whether internal or external.

    Schools often function as open transit hubs, offering broad internet access to students and staff. In these environments, once malware finds its way in, it can spread quickly if unchecked. Perimeter-only defenses leave too many blind spots and do little to stop insider threats. Zero Trust closes those gaps by treating every request as potentially hostile and requiring ongoing verification at every step.

    A fundamental truth of Zero Trust is that cyberattacks will happen. That means building controls that don’t just alert us but act–before and during a network intrusion. The critical step is containment: limiting damage the moment a breach is successful.  

    Assume breach accepts that a breach will happen, and Zero Trust ensures it doesn’t become a disaster that shuts down operations. Like seatbelts in a car–prevention matters. Strong brakes are essential, but seatbelts and airbags minimize the harm when prevention fails. Zero Trust works the same way, containing threats and limiting damage so that even if an attacker gets in, they can’t turn an incident into a full-scale disaster.

    Zero Trust does not require an overnight overhaul. Schools can start by defining their protect surface – the vital data, systems, and operations that matter most. This typically includes Social Security numbers, financial data, and administrative services that keep classrooms functioning. By securing this protect surface first, districts reduce the complexity of Zero Trust implementation, allowing them to focus their limited resources on where they are needed most.

    With this approach, Zero Trust policies can be layered gradually across systems, making adoption realistic for districts of any size. Instead of treating it as a massive, one-time overhaul, IT leaders can approach Zero Trust as an ongoing journey–a process of steadily improving security and resilience over time. By tightening access controls, verifying every connection, and isolating threats early, schools can contain incidents before they escalate, all without rebuilding their entire network in one sweep.  

    Cyber awareness starts in the classroom

    Technology alone isn’t enough. Because some insider threats stem from student curiosity or misuse, cyber awareness must start in classrooms. Integrating security education into the learning environment ensures students and staff understand their role in protecting sensitive information. Training should cover phishing awareness, strong password practices, the use of multifactor authentication (MFA), and the importance of keeping systems patched.

    Building cyber awareness does not require costly programs. Short, recurring training sessions for students and staff keep security top of mind and help build a culture of vigilance that reduces both accidental and intentional insider threats.

    Breaches are inevitable, but disasters are optional

    Breaches are inevitable. Disasters are not. The difference lies in preparation. For resource-strapped districts, stronger cybersecurity doesn’t require sweeping overhauls. It requires a shift in mindset:

    • Assume breach
    • Define the protect surface
    • Implement Zero Trust in phases
    • Instill cyber hygiene

    When schools take this approach, cyberattacks become manageable incidents. Classrooms remain open, students continue learning, and communities continue receiving the vital support schools provide – even in the face of disruption. Like seatbelts in a car, these measures won’t prevent every crash – but they ensure schools can continue to function even when prevention fails.

    Latest posts by eSchool Media Contributors (see all)

    Source link

  • How school IT teams lock down QR-based SSO without hurting usability

    How school IT teams lock down QR-based SSO without hurting usability

    Key points:

    Schools can keep QR logins safe and seamless by blending clear visual cues, ongoing user education, and risk-based checks behind the scenes

    QR-based single sign-on (SSO) is fast becoming a favorite in schools seeking frictionless access, especially for bring-your-own-device (BYOD) environments.

    The BYOD in education market hit $15.2 billion in 2024 and is projected to grow at a 17.4 percent CAGR from 2025 to 2033, driven by the proliferation of digital learning and personal smart devices in schools.

    However, when attackers wrap malicious links into QR codes, school IT leaders must find guardrails that preserve usability without turning every login into a fortress.

    Phishing via QR codes, a tactic now known as “quishing,” is where attackers embed malicious QR codes in emails or posters, directing pupils, faculty, and staff to fake login pages. Over four out of five K-12 schools experienced cyber threat impacts with human-targeted threats like phishing or quishing, exceeding other techniques by 45 percent.

    Because QR codes hide or obscure the URL until after scanning, they evade many traditional email spam filters and link scanners.

    Below are three strategies to get that balance between seamless logins and safe digital environments right.

    How to look out for visual signals

    Approximately 60 percent of emails containing QR codes are classified as spam. Branded content, such as the school or district logo, consistent with the look and feel of other web portals and student apps, will help students identify a legitimate QR over a malicious one.

    Frontier research shows that bold colors and clear iconography can increase recognition speed by up to 40 percent. This is the kind of split-second reassurance a student or teacher needs before entering credentials on a QR-based login screen.

    Training your users to look for the full domain or service name, such as “sso.schooldistrict.edu” under the QR, is good practice to avoid quishing attacks, school-related or not. However, this will be trickier for younger students.

    The Frontier report demonstrates how younger children rely more heavily on color and icon cues than on text or abstract symbols. For K-12 students, visual trust cues such as school crests, mascots, or familiar color schemes offer a cognitive shortcut to legitimacy.

    Still, while logos and “Secured by…” badges are there to reassure users, attackers know this. Microsoft, Cisco Talos, and Palo Alto Unit42 have documented large-scale phishing campaigns where cybercriminals cloned Microsoft 365 and Okta login pages, complete with fake security seals, to harvest credentials.

    For schools rolling out QR-based SSO, pairing visible trust cues with dynamic watermarks unique to the institution makes it harder for attackers to replicate.

    User education on quishing risk

    Human error drives most breaches, particularly in K-12 schools. These environments handle a mix of pupils who are inexperienced with security risks and, therefore, are less likely to scrutinize QR codes, links, or credentials.

    Students and teachers must be taught the meaning of signs and the level of detail to consider in order to respond more quickly and correctly. A short digital literacy module about QR logins can dramatically cut phishing and quishing risk, reinforcing what legitimate login screens should look like. These should be repeated regularly for updates and to strengthen the retrieval and recognition of key visual cues.

    Research in cognitive psychology shows that repeated exposure can boost the strength of a memory by more than 30 percent, making cues harder to ignore and easier to recall. When teaching secure login habits, short, repeated micro-lessons–for example, 3-5 min videos with infographics–can boost test scores 10-20 percent. Researcher Piotr Wozniak suggests spacing reviews after 1 day, then 7 days, 16 days, 35 days, and later every 2-3 months.

    With proper education, students should instinctively not trust QRs received via text message or social media through unverified numbers or accounts. Encouraging the use of a Secure QR Code Scanner app, at least for staff and perhaps older students, can be helpful, because it will verify the embedded URL before a user opens it.

    When to step up authentication after a scan

    QR codes make logging in fast, but after a scan, you don’t have to give full access right away. Instead, schools can use these scans as the first factor and decide whether to require more proof before granting access, depending on risk signals.

    For example, if a student or teacher scans the QR code with a phone or tablet that’s not on the school’s “known device” list, the system should prompt for a PIN, passphrase, or MFA push before completing login. The same applies to sensitive systems that include student data or financial information.

    Microsoft’s 2024 Digital Defense Report shows that adding MFA blocks 99.2 percent of credential attacks. That means a simple SMS or push-based MFA can drastically slash phishing and quishing success rates. By adding a quick MFA prompt only when risk signals spike, school IT teams preserve the speed of QR logins without giving up security.

    Schools can also apply cloud-security platforms to strengthen QR-based SSO without sacrificing ease of use. These tools sit behind the scenes, continuously monitoring Google Workspace, Microsoft 365, and other education apps for unusual logins, risky devices, or policy violations.

    By automatically logging every QR login event, including device, time, and location, and triggering alerts when something looks off, IT teams gain visibility and early warning without adding extra friction for staff or students. This approach lets schools keep QR sign-ins fast and familiar with risk-based controls and data protection running in the background.

    Schools can keep QR logins safe and seamless by blending clear visual cues, ongoing user education, and risk-based checks behind the scenes. Students and staff learn to recognize authentic screens, while IT teams add extra verification only when behavior looks risky. Simultaneously, continuous monitoring tracks every scan to catch problems early and improve education resources, all without slowing anyone down.

    Latest posts by eSchool Media Contributors (see all)

    Source link

  • Missouri Voters Approve Four-Day School Week in Two Districts, Showing Rising Support – The 74

    Missouri Voters Approve Four-Day School Week in Two Districts, Showing Rising Support – The 74


    Get stories like this delivered straight to your inbox. Sign up for The 74 Newsletter

    When the Independence School District announced it was switching to a four-day week during the 2023-24 school year, it drew questions from local families and statewide officials.

    Parents wondered what kind of child care they would have on days without classroom instruction. And lawmakers debated whether the state needed to intervene.

    Ultimately, Missouri’s General Assembly passed a law requiring a vote for non–rural school districts to authorize a four-day week.

    On Tuesday, the Independence and Hallsville school districts became the first large districts to receive the approval of voters to continue with four-day weeks.

    “I knew that the majority of our community supported it,” Hallsville Superintendent Tyler Walker told The Independent. “I was a little bit surprised to see how much support it was.”

    In Hallsville, residents had two questions on the ballot related to the school district. One asked about the four-day week and the other was a bond measure previously passed in April but not confirmed by the State Auditor.

    The election drew 25% of registered voters, according to the Boone County Clerk, and 75% of those voted in favor of the four-day school week. The vote authorizes the schedule for the next 10 years, when then the district will have to hold another special election.

    Walker didn’t think the margin would be that wide. Earlier surveys from the district’s 2022 adoption of the schedule put approval at around 60%.

    He believes that the district’s growing success on standardized tests and other publicly available metrics have given families confidence that the four-day week isn’t such a bad thing.

    “Our community has grown to appreciate the four day week more after experiencing it for a few years,” he said.

    Todd Fuller, director of communications for the Missouri State Teachers Association, told The Independent that voters in districts who have already been operating in a four-day week like Independence and Hallsville have an idea of how it works for their students. The state law, passed in 2024, will require a vote prior to the schedule’s adoption for those who do not already adopt the abbreviated week.

    “Anyone who’s a constituent of the district has had time to digest this process, and they’ve been able to decide over a two-year period whether it’s been beneficial or not beneficial for their kids,” Fuller said. “So if they are expressing that feeling with their vote, then we’re going to have a pretty good understanding of what they really want.”

    The association doesn’t have an official stance on the four-day week. But Fuller said the teachers it represents have been pleased with the schedule.

    Jorjana Pohlman, president of Independence’s branch of the Missouri National Education Association, told The Independent that the overall sentiment is positive from the district’s educators.

    Mondays out of the classroom have become a good time for teachers to have doctor’s appointments, spend time with their families and plan for the week ahead, she said.

    “In the beginning, it was fear of the unknown for families as well as teachers,” she said. “A lot of teachers had the attitude of, ‘Let’s try it.’ They, I think overall, felt it was a positive thing.”

    A study by Missouri State University researchers looked at recent applicants to teaching positions in Independence, finding that the four-day week was a key part of the district’s recruitment.

    In particular, 63% of applicants rated the four-day schedule as a top-three reason for applying, and 27% said it was their top priority.

    The study also looked at the value of the four-day week for applicants, asking how much they would sacrifice in salary to work at a district with the schedule. On average, applicants were willing to sacrifice $2267 annually for the four-day week.

    Walker said the schedule has also improved recruitment in Hallsville, with a dramatic uptick in veteran teachers applying to positions.

    With teachers coming to Independence schools particularly for their schedule, some worried that returning to a five-day week would have large consequences for staffing. But Pohlman said a survey showed that the loss of educators is less than many would think.

    “The educators, they care deeply about their students, and they want what’s best for students and for the community, whether it’s four day week or five day week,” she said. “They are still going to be committed.”

    Almost a third of Missouri districts have adopted a four-day week, with around 91% of those districts in rural settings. Only districts in cities with at least 30,000 residents, or those located in Jackson, Clay, St. Louis, Jefferson and St. Charles counties, must call for a vote before moving to a four-day week.

    Missouri Independent is part of States Newsroom, a nonprofit news network supported by grants and a coalition of donors as a 501c(3) public charity. Missouri Independent maintains editorial independence. Contact Editor Jason Hancock for questions: [email protected].


    Did you use this article in your work?

    We’d love to hear how The 74’s reporting is helping educators, researchers, and policymakers. Tell us how

    Source link

  • States, districts grapple with declining enrollment

    States, districts grapple with declining enrollment

    This audio is auto-generated. Please let us know if you have feedback.

    Declining student enrollment is plaguing public schools at state and district levels nationwide, with the impact being felt from falling birthrates and expanding school choice programs.

    As preliminary enrollment data for the 2025-26 school year has begun rolling out, school leaders are being forced to plan ahead for some tough decisions over staffing and school consolidations. 

    Significant enrollment declines have been cause for alarm in districts ranging from Texas’ Austin Independent School District and Arizona’s Kyrene School District to Atlanta Public Schools and Florida’s Broward County Public Schools — all of which are considering school closures or consolidations. 

    While K-12 finance researchers have warned of this trend for years, the historic and one-time federal COVID-19 relief funds delayed the inevitable financial challenge for some districts — until now.  

    Here is a look at how the development is affecting selected states and districts.

    Alabama

    Alabama experienced a 0.8% dip in public student enrollment from 720,181 in 2024-25 to 714,358 for the 2025-26 school year, according to data from the Alabama State Department of Education. 

    This marks the state’s steepest enrollment drop in 40 years, Alabama State Superintendent of Education Eric Mackey told an October board meeting. The state’s historic enrollment decline is most likely due to students opting into a new voucher program known as the CHOOSE Act, Mackey said. 

    Another key reason, though, is that some students “just disappeared” and never showed up despite being enrolled in an Alabama public school, he said. Alabama superintendents have told Mackey that it seems a majority of those students who were unaccounted for were Hispanic with unknown immigration statuses, he said.

    Because of the sharp decline in overall student enrollment, Mackey projects that the district will need 500 to 700 fewer teachers by the 2026-27 school year. 

    Over 23,000 students were approved this year to receive an estimated $124 million in education savings accounts through the CHOOSE Act, which allows families to use ESAs to cover private school tuition, fees and other qualified education expenses, according to an Oct. 17 announcement by Alabama Gov. Kay Ivey. 

    West Virginia

    West Virginia’s enrollment has been in steady decline for the last decade. Between 2023 and 2024, the state saw one of the largest public school enrollment drops in the nation, losing 1.7% of its student body, according to a June analysis by the Reason Foundation, a libertarian think tank. 

    Since 2017-18, the state’s public school enrollment has fallen steeply —  from 270,613 students to 241,013 in 2024-25, for a 10.9% decrease, according to the most recently available data from the West Virginia Department of Education. 

    This decline, along with the expiration of federal COVID-19 aid, an “outdated” state education funding formula and an increasingly popular state school voucher program have contributed to a wave of school closures statewide, according to the West Virginia Center on Budget & Policy. Over 70 West Virginia public schools have closed since 2019, “and more closures are on the way,” the center said. 

    Wisconsin

    In Wisconsin, preliminary unaudited state data reveals that enrollment fell nearly 6%, or by about 46,180 students in September 2025-26 school year compared to the year-over-year counts. After that drop, the state enrolled 759,701 students this school year versus 805,881 in September of 2024-25, according to the Wisconsin Department of Public Instruction.

    One Wisconsin state representative said in September that the number of public school districts in the state — currently at 421 — “is going to have to drop,” The Center Square reported. The legislator, Rep. Amanda Nedweski, added in a press conference that she plans to introduce state legislation by year’s end that would encourage school districts to consolidate as a shrinking population and lower birth rates continue contributing to declining enrollment. 

    Source link

  • How districts can avoid 4 hidden costs of outdated facilities systems

    How districts can avoid 4 hidden costs of outdated facilities systems

    Key points:

    School leaders are under constant pressure to stretch every dollar further, yet many districts are losing money in ways they may not even realize. The culprit? Outdated facilities processes that quietly chip away at resources, frustrate staff, and create ripple effects across learning environments. From scheduling mishaps to maintenance backlogs, these hidden costs can add up fast, and too often it’s students who pay the price. 

    The good news is that with a few strategic shifts, districts can effectively manage their facilities and redirect resources to where they are needed most. Here are four of the most common hidden costs–and how forward-thinking school districts are avoiding them. 

    How outdated facilities processes waste staff time in K–12 districts

    It’s a familiar scene: a sticky note on a desk, a hallway conversation, and a string of emails trying to confirm who’s handling what. These outdated processes don’t just frustrate staff; they silently erode hours that could be spent on higher-value work. Facilities teams are already stretched thin, and every minute lost to chasing approvals or digging through piles of emails is time stolen from managing the day-to-day operations that keep schools running.  

    A centralized, intuitive facilities management software platform changes everything. Staff and community members can submit requests in one place, while automated, trackable systems ensure approvals move forward without constant follow-up. Events sync directly with Outlook or Google calendars, reducing conflicts before they happen. Work orders can be submitted, assigned, and tracked digitally, with mobile access that lets staff update tickets on the go. Real-time dashboards offer visibility into labor, inventory, and preventive maintenance, while asset history and performance data enable leaders to plan more effectively for the long term. Reports for leadership, audits, and compliance can be generated instantly, saving hours of manual tracking. 

    The result? Districts have seen a 50-75 percent reduction in scheduling workload, stronger cross-department collaboration, and more time for the work that truly moves schools forward.

    Using preventive maintenance to avoid emergency repairs and extend asset life

    When maintenance is handled reactively, small problems almost always snowball into costly crises. A leaking pipe left unchecked can become a flooded classroom and a ruined ceiling. A skipped HVAC inspection may lead to a midyear system failure, forcing schools to close or scramble for portable units. 

    These emergencies don’t just drain budgets; they disrupt instruction, create safety hazards, and erode trust with families. A more proactive approach changes the narrative. With preventive maintenance embedded into a facilities management software platform, districts can automate recurring schedules, ensure tasks are assigned to the right technicians, and attach critical resources, such as floor plans or safety notes, to each task. Schools can prioritize work orders, monitor labor hours and expenses, and generate reports on upcoming maintenance to plan ahead. 

    Restoring systems before they fail extends asset life and smooths operational continuity. This keeps classrooms open, budgets predictable, and leaders prepared, rather than reactive. 

    Maximizing ROI by streamlining school space rentals

    Gymnasiums, fields, and auditoriums are among a district’s most valuable community resources, yet too often they sit idle simply because scheduling is complicated and chaotic. Paper forms, informal approvals, and scattered communication mean opportunities slip through the cracks.

    When users can submit requests through a single, digital system, scheduling becomes transparent, trackable, and far easier to manage. A unified dashboard prevents conflicts, streamlines approvals, and reduces the back-and-forth that often slows the process. 

    The payoff isn’t just smoother operations; districts can see increased ROI through easier billing, clearer reporting, and more consistent use of unused spaces. 

    Why schools need facilities data to make smarter budget decisions

    Without reliable facilities data, school leaders are forced to make critical budget and operational decisions in the dark. Which schools need additional staffing? Which classrooms, gyms, or labs are underused? Which capital projects should take priority, and which should wait? Operating on guesswork not only risks inefficient spending, but it also limits a district’s ability to demonstrate ROI or justify future investments. 

    A clear, centralized view of facilities usage and costs creates a strong foundation for strategic decision-making. This visibility can provide instant insights into patterns and trends. Districts can allocate resources more strategically, optimize staffing, and prioritize projects based on evidence rather than intuition. This level of insight also strengthens accountability, enabling schools to share transparent reports with boards, staff, and other key stakeholders, thereby building trust while ensuring that every dollar works harder. 

    Facilities may not always be the first thing that comes to mind when people think about student success, but the way schools manage their spaces, systems, and resources has a direct impact on learning. By moving away from outdated, manual processes and embracing smarter, data-driven facilities management, districts can unlock hidden savings, prevent costly breakdowns, and optimize the use of every asset. 

    Latest posts by eSchool Media Contributors (see all)

    Source link

  • How districts help students gain real-life skills

    How districts help students gain real-life skills

    This audio is auto-generated. Please let us know if you have feedback.

    WASHINGTON — In Illinois’ Lake Forest School Districts 67 and 115, educators are incorporating real-life skills — such as adaptability, critical thinking, communication and other 21st century competencies — into their curricula in efforts to help students succeed in K-12 and beyond.

    The work is emphasized through activities like a blog for families and educators on resilience and growth mindset and a Portrait of a Learner construct that describes the competencies students need to demonstrate in addition to academic excellence.

    These real-life skills are “not nice to haves. They are musts,” said Matthew Montgomery, who is superintendent of both districts. “They are as important as a rich foundational experience of mathematics or the classics in literature. We cannot treat them as soft skills anymore.”

    Montgomery, along with about 150 other district leaders, educators, researchers and neuroscientists gathered last week at a Real Skills for Real Life Summit to discuss what host AASA, The School Superintendent Association called the “new basics for learning.”

    Speakers told the summit attendees that incorporating development of these skills into the school day must be intentional, collaborative and driven by student input. The work is rooted in building a sense of belonging and compassion, as well as encouraging students to take safe risks, they said.

    “Kids want to be listened to and they want to be heard. They want to be respected, connected, and they want to feel cared for. They want to have fun,” said Ryan Rydzewski, communications officer at The Grable Foundation, a nonprofit focused on children’s successful development. 

    Speakers and attendees offered practical ways schools can hone real-life skills in students, including:

    • Add joy and laughter into learning moments. 
    • Model and normalize making mistakes.
    • Offer students choice in how they engage in learning and how they demonstrate their knowledge.
    • Help teachers understand their own executive functioning skills and growth mindsets.
    • Guide students through holding themselves accountable for their choices.

    Mary Helen Immordino-Yang, a professor of education, psychology and neuroscience at the University of Southern California, said real-life skills like self awareness, curiosity, executive functioning, agency and relationship-building are critical to a student’s learning process.

    “We in education systems traditionally think of academic knowledge and scholarly knowledge as being separate from the experience of being a person — and psychologically and, it turns out, neurologically, that is not correct,” Immordino-Yang said.

    Rydzewski acknowledged that the work to build real-life skills can be hard and complex. Montgomery agreed, saying the Portrait of a Learner used in the Lake Forest districts is consistently being reexamined and improved upon based on student needs. The districts’ partnerships with students, families, educators, board members and others are imperative to this work, he said.

    “We do not have it figured out,” Montgomery said. “I actually hope I never have it figured out, because that means there’s no work to do, but we are getting closer to defining what we are trying to work on and what matters to us.”

    Source link

  • K-12 districts are fighting ransomware, but IT teams pay the price

    K-12 districts are fighting ransomware, but IT teams pay the price

    Key points:

    The education sector is making measurable progress in defending against ransomware, with fewer ransom payments, dramatically reduced costs, and faster recovery rates, according to the fifth annual Sophos State of Ransomware in Education report from Sophos.

    Still, these gains are accompanied by mounting pressures on IT teams, who report widespread stress, burnout, and career disruptions following attacks–nearly 40 percent of the 441 IT and cybersecurity leaders surveyed reported dealing with anxiety.

    Over the past five years, ransomware has emerged as one of the most pressing threats to education–with attacks becoming a daily occurrence. Primary and secondary institutions are seen by cybercriminals as “soft targets”–often underfunded, understaffed, and holding highly sensitive data. The consequences are severe: disrupted learning, strained budgets, and growing fears over student and staff privacy. Without stronger defenses, schools risk not only losing vital resources but also the trust of the communities they serve.

    Indicators of success against ransomware

    The new study demonstrates that the education sector is getting better at reacting and responding to ransomware, forcing cybercriminals to evolve their approach. Trending data from the study reveals an increase in attacks where adversaries attempt to extort money without encrypting data. Unfortunately, paying the ransom remains part of the solution for about half of all victims. However, the payment values are dropping significantly, and for those who have experienced data encryption in ransomware attacks, 97 percent were able to recover data in some way. The study found several key indicators of success against ransomware in education:

    • Stopping more attacks: When it comes to blocking attacks before files can be encrypted, both K-12 and higher education institutions reported their highest success rate in four years (67 percent and 38 percent of attacks, respectively).
    • Following the money: In the last year, ransom demands fell 73 percent (an average drop of $2.83M), while average payments dropped from $6M to $800K in lower education and from $4M to $463K in higher education.
    • Plummeting cost of recovery: Outside of ransom payments, average recovery costs dropped 77 percent in higher education and 39 percent in K-12 education. Despite this success, K-12 education reported the highest recovery bill across all industries surveyed.

    Gaps still need to be addressed

    While the education sector has made progress in limiting the impact of ransomware, serious gaps remain. In the Sophos study, 64 percent of victims reported missing or ineffective protection solutions; 66 percent cited a lack of people (either expertise or capacity) to stop attacks; and 67 percent admitted to having security gaps. These risks highlight the critical need for schools to focus on prevention, as cybercriminals develop new techniques, including AI-powered attacks.

    Highlights from the study that shed light on the gaps that still need to be addressed include:

    • AI-powered threats: K-12 education institutions reported that 22 percent of ransomware attacks had origins in phishing. With AI enabling more convincing emails, voice scams, and even deepfakes, schools risk becoming test grounds for emerging tactics.
    • High-value data: Higher education institutions, custodians of AI research and large language model datasets, remain a prime target, with exploited vulnerabilities (35 percent) and security gaps the provider was not aware of (45 percent) as leading weaknesses that were exploited by adversaries.
    • Human toll: Every institution with encrypted data reported impacts on IT staff. Over one in four staff members took leave after an attack, nearly 40 percent reported heightened stress, and more than one-third felt guilt they could not prevent the breach.

    “Ransomware attacks in education don’t just disrupt classrooms, they disrupt communities of students, families, and educators,” said Alexandra Rose, director of CTU Threat Research at Sophos. “While it’s encouraging to see schools strengthening their ability to respond, the real priority must be preventing these attacks in the first place. That requires strong planning and close collaboration with trusted partners, especially as adversaries adopt new tactics, including AI-driven threats.”

    Holding on to the gains

    Based on its work protecting thousands of educational institutions, Sophos experts recommend several steps to maintain momentum and prepare for evolving threats:

    • Focus on prevention: The dramatic success of lower education in stopping ransomware attacks before encryption offers a blueprint for broader public sector organizations. Organizations need to couple their detection and response efforts with preventing attacks before they compromise the organization.
    • Secure funding: Explore new avenues such as the U.S. Federal Communications Commission’s E-Rate subsidies to strengthen networks and firewalls, and the UK’s National Cyber Security Centre initiatives, including its free cyber defense service for schools, to boost overall protection. These resources help schools both prevent and withstand attacks.
    • Unify strategies: Educational institutions should adopt coordinated approaches across sprawling IT estates to close visibility gaps and reduce risks before adversaries can exploit them.
    • Relieve staff burden: Ransomware takes a heavy toll on IT teams. Schools can reduce pressure and extend their capabilities by partnering with trusted providers for managed detection and response (MDR) and other around-the-clock expertise.
    • Strengthen response: Even with stronger prevention, schools must be prepared to respond when incidents occur. They can recover more quickly by building robust incident response plans, running simulations to prepare for real-world scenarios, and enhancing readiness with 24/7/365 services like MDR.

    Data for the State of Ransomware in Education 2025 report comes from a vendor-agnostic survey of 441 IT and cybersecurity leaders – 243 from K-12 education and 198 from higher education institutions hit by ransomware in the past year. The organizations surveyed ranged from 100-5,000 employees and across 17 countries. The survey was conducted between January and March 2025, and respondents were asked about their experience of ransomware over the previous 12 months.

    This press release originally appeared online.

    Latest posts by eSchool Media Contributors (see all)

    Source link

  • Book bans becoming the new norm for districts, report says

    Book bans becoming the new norm for districts, report says

    Dive Brief:

    • In the fourth school year since book bans proliferated on local school board levels, districts are now also facing federal and state pressures to ban books, according to a report released Oct. 1 by PEN America, a nonprofit that advocates for free speech. 
    • The organization noted that federal efforts to influence education issues are repeating state and local book banning rhetoric, which it calls a “a new vector of book banning pressure.” For example, the parental rights movement behind book banning is being repeated at the federal level in executive orders leading to the reversal of diversity, equity and inclusion initiatives and LGBTQ+ inclusion. 
    • The escalating book censorship campaigns usurp educators’ time that would otherwise be used for instruction, can subject them to harassment, and also leads to them spending long hours cataloging books and dedicating more administrative time to comply with bans, the report said. Districts are also incurring “significant” legal costs navigating lawsuits. 

    Dive Insight:

    There were 6,870 instances of book bans across 23 states and 87 public school districts in the 2024-25 school year, according to PEN America. That totals 22,810 cases of book bans across 45 states and 451 public school districts since the organization began tracking the issue in July 2021.

    PEN America’s definition of “bans” includes books that have been taken off the shelf pending investigation, and any other steps taken against books as a result of parent, community or government pushback leading to limited student access.

    “From a birds’ eye view, school districts today are surrounded by multiple and persistent local, state, and now federal pressures to ban books, with diminishing reasons not to,” the report said. 

    At the federal level, the Trump administration’s U.S. Department of Education in January rescinded Biden-era guidance. That guidance had warned school districts that they could violate civil rights law by implementing book bans, and it said that removing “age-inappropriate” books from schools is a parent and community decision that the federal government “has no role in.” 

    At the same time, the department dismissed 11 civil rights complaints related to book bans.

    It also eliminated the position of a book ban coordinator, created by the Biden administration in 2023 to develop training for schools on navigating book bans. 

    Four years after the initial wave of book bans swept localities, communities and educators “have been conditioned to expect book challenges and bans as part of the U.S. education system,” PEN America said in a statement. 

    “A disturbing ‘everyday banning’ and normalization of censorship has worsened and spread over the last four years,” said Kasey Meehan, director of PEN America’s Freedom to Read program, in an Oct. 1 statement. “The result is unprecedented.” 

    Districts are responding by removing books to comply out of fear of losing funding, staff being fired or harassed, and sometimes having police involvement, the organization said. 

    In an August 2024 report, the Knight Foundation found in a survey of over 4,500 adults that two-thirds of Americans oppose book restrictions in schools and even more are confident in public schools’ book selection. More Americans said in that survey that it was more concerning to restrict students’ access to books with educational value than it was to provide them with access to books that have inappropriate content.

    However, a majority (6 in 10) also said that age appropriateness — as opposed to parents’ political views, religious beliefs or moral values — was a legitimate reason to restrict students’ book access. The survey included responses from over 1,100 pre-K-12 parents.

    Source link

  • I asked students why they go to school–this answer changed how I design campuses

    I asked students why they go to school–this answer changed how I design campuses

    This story was originally published by Chalkbeat. Sign up for their newsletters at ckbe.at/newsletters.

    At first, the question seemed simple: “Why do we go to school?”

    I had asked it many times before, in many different districts. I’m a planner and designer specializing in K-12 school projects, and as part of a community-driven design process, we invite students to dream with us and help shape the spaces where they’ll learn, grow, and make sense of the world.

    In February of 2023, I was leading a visioning workshop with a group of middle schoolers in Southern California. Their energy was vibrant, their curiosity sharp. We began with a simple activity: Students answered a series of prompts, each one building on the last.

    “We go to school because …”

    “We need to learn because …”

    “We want to be successful because …”

    As the conversation deepened, so did their responses. One student wrote, “We want to get further in life.” Another added, “We need to help our families.” And then came the line that stopped me in my tracks: “We go to school because we want future generations to look up to us.”

    I’ve worked with a lot of middle schoolers. They’re funny, unfiltered, and often far more insightful than adults give them credit for. But this answer felt different. It wasn’t about homework, or college, or even a dream job. It was about legacy. At that moment, I realized I wasn’t just asking kids to talk about school. I was asking them to articulate their hopes for the world and their role in shaping it.

    As a designer, I came prepared to talk about flexible furniture, natural light, and outdoor learning spaces. The students approached the conversation through the lens of purpose, identity, and intergenerational impact. They reminded me that school isn’t just a place to pass through — it’s a place to imagine who you might become and how you might leave the world better than you found it.

    I’ve now led dozens of school visioning sessions, no two being alike. In most cases, adults are the ones at the table: district leaders, architects, engineers, and community members. Their perspectives are important, of course. But when we exclude students from shaping the environments they spend most days in, we send an implicit message that this place is not really theirs to shape.

    However, when we do invite them in, the difference is immediate. Students are not only willing participants, they’re often the most honest and imaginative contributors in the room. They see past the buzzwords like 21st-century learning, flexible furniture, student-centered design, and collaborative zones, and talk about what actually matters: where they feel safe, where they feel seen, where they can be themselves.

    During that workshop when the student spoke about legacy, other young participants asked for more flexible learning spaces, places to move around and collaborate, better food, outdoor classrooms, and quiet areas for mental health breaks. One asked for sign language classes to better communicate with her hard-of-hearing best friend. Another asked for furniture that can move from inside to outside. These aren’t requests that tend to show up on state-issued planning checklists, which are more likely to focus on square footage, capacity, and code compliance, but they reflect an extraordinary level of thought about access, well-being, and inclusion.

    The lesson: When we take students seriously, we get more than better design. We get better schools.

    There’s a popular saying in architecture: Form follows function. But in school design, I’d argue that form should follow voice. If we want to build learning environments that support joy, connection, and growth, we need to start by asking students what those things look and feel like to them — and then believe them.

    Listening isn’t a checkbox. It’s a practice. And it has to start early, not once construction drawings are finalized, but when goals and priorities are still being devised. That’s when student input can shift the direction of a plan, not just decorate it.

    It’s also not just about asking the right questions, but being open to answers we didn’t expect. When a student says, “Why do the adults always get the rooms with windows?” — as one did in another workshop I led — that’s not a complaint. That’s a lesson in power dynamics, spatial equity, and the unspoken messages our buildings send.

    Since that day, about a year and a half ago, when I heard, “We want future generations to look up to us,” I’ve carried that line with me into every planning session. It’s a reminder that students aren’t just users of school space. They’re stewards of something bigger than themselves.

    So if you’re a school leader, a planner, a teacher, or a policymaker, invite students in early. Make space for their voices, not just as a formality but as a source of wisdom. Ask questions that go beyond what color the walls should be. And don’t be surprised when the answers you get are deeper than you imagined. Be willing to let their vision shift yours.

    Because when we design with students, not just for them, we create schools that don’t just house learning. We create schools that help define what learning is for. And if we do it right, maybe one day, future generations will look up to today’s students not just because of what they learned, but because of the spaces they helped shape.

    Chalkbeat is a nonprofit news site covering educational change in public schools.

    For more news on district and school management, visit eSN’s Educational Leadership hub.

    Latest posts by eSchool Media Contributors (see all)

    Source link

  • NJ Governor Hopefuls Split on Forcing School Districts to Merge – The 74

    NJ Governor Hopefuls Split on Forcing School Districts to Merge – The 74


    Get stories like this delivered straight to your inbox. Sign up for The 74 Newsletter

    New Jersey’s gubernatorial candidates both want school districts to consolidate as a cost-saving maneuver, but they differ on whether the state should force districts to merge with their neighbors.

    Rep. Mikie Sherrill, the Democratic gubernatorial nominee, said during Sunday’s gubernatorial debate that she would first incentivize mergers but added that compulsory consolidation was an option.

    “I’d start by offering the carrot to help the areas that want to consolidate, but when there are areas that are not putting enough money into students, into educators, into the buildings, and then they are taking a lot of money in property taxes and from the state level, then we’ll have to start to look at compulsory movements,” Sherrill said.

    Republican Jack Ciattarelli, a former assemblyman, likewise said he would seek to boost incentives and assistance to municipalities and school districts seeking mergers, but he pledged not to force them.

    “I do not believe that our state government should force consolidation. That’s up to the locals,” he said. “But I’ll tell you what, if you do consolidate or you do regionalize, Governor Ciattarelli will help incentivize that to make it easier.”

    Sherrill and Ciattarelli are vying to succeed Gov. Phil Murphy, a Democrat who cannot seek a third term in November.

    Officials have long hailed school consolidation as a means of easing local property taxes by reducing duplicative administrative and facilities costs, but uptake has been slow.

    New Jersey had 590 operating school districts during the 2024-2025 school year, according to state data, down from 599 in the 2020-2021 school year.

    The number of non-operating districts — districts that have a board of education but send all their students to schools in outlying districts — fell from 17 to 16 over that same time period. Sherrill signaled those districts could be the first merged if she wins the governor’s race.

    “We have some school districts who have the whole administrative cost, all of the buildings, and yet they’re not even running a K-12 school system, so we do need to merge some of these school districts,” she said.

    Schools consume a majority of local property taxes — 52% of all those collected in 2024, according to property tax tables published by the Department of Community Affairs — and the more than $15.1 billion in school aid approved in the current state budget accounted for more than a quarter of all spending approved in the annual appropriations bill for the current July-to-June fiscal year. That total includes more than $4 billion in combined special education, transportation, and other categories of aid separate from the state’s school funding formula.

    Ciattarelli suggested school vouchers — which allow property tax dollars to follow a student to a private school, a public school outside their district, or a charter school — could be a fix for ailing districts.

    “When a school system is failing — and there’s some reasonable metrics that tell us whether or not a school system is failing — there’s got to be choice,” he said. “That choice comes in the form of vouchers. That choice comes in the form of charter schools.”

    Because vouchers typically draw from school district funding, they could cause funding to decline at in-district public schools as students seek education elsewhere.

    New Jersey lawmakers have considered compelling school district mergers or shared service agreements, but to date, such mergers have been entirely voluntary.

    Murphy, who has generally favored school mergers, last year said he was “not wild about compulsory” consolidation, cautioning that home rule, a constitutional framework that gives local governments broad authority over the administration of school and other municipal services, could limit forced mergers.

    A law he signed in 2022 created grants for districts to study whether consolidation was feasible, though only a handful of districts have explored such mergers since.

    Cape May City Elementary School and West Cape May Elementary School are the latest to receive grants to explore a merger. Together, the two Cape May County schools have just 241 students.

    New Jersey Monitor is part of States Newsroom, a nonprofit news network supported by grants and a coalition of donors as a 501c(3) public charity. New Jersey Monitor maintains editorial independence. Contact Editor Terrence T. McDonald for questions: [email protected].


    Get stories like these delivered straight to your inbox. Sign up for The 74 Newsletter

    Source link