Skip to main content

Cybersecurity for Teachers

Purpose

Historically, the NCDPI K-12 Cybersecurity Program primarily focuses on providing holistic K-12 Cybersecurity support from the state-level to the PSU-level. Most of the program’s tools & resources were targeted towards district technology leaders who could implement the necessary top-down changes to help create Strong Cyber Hygiene. It is imperative, however, that we also provide resources and support for the teachers who serve as the lifeblood of the PSUs. This allows for a similar bottom-up approach that ensures every member of a PSU is empowered to affect positive change in their community.

Resources

Best Practices

As a K-12 teacher, cybersecurity is essential for maintaining the safety and privacy of both your personal information and the students you interact with. Teachers are often entrusted with sensitive student data, and many also use various online platforms and educational tools that could be vulnerable to cyber threats. Therefore, it is imperative that North Carolina teachers implement the following best practices:

Protect Student Data & Privacy

  • Understand FERPA: The Family Educational Rights and Privacy Act (FERPA) is a federal law that protects the privacy of student education records. Be aware of the policies your school or district has in place for storing and sharing student data. Avoid sharing personal or confidential information via unsecured methods.
  • Be Mindful of Sharing Personal Data: Don’t post personal details about students or staff on social media or unprotected online platforms. Always use school-approved channels for communication and sharing documents.
  • Secure Student Accounts: Ensure that student accounts (whether for school-provided tools, email, or learning platforms) are secured with strong passwords and multi-factor authentication (MFA) when possible.

Use Strong and Unique Passwords

  • Create Strong Passwords: Always use a mix of upper and lower case letters, numbers, and special characters. Avoid using easily guessable information like birthdays or names.
  • Use Different Passwords for Different Accounts: Don’t reuse passwords across platforms. If one account is compromised, it can expose other accounts.
  • Password Manager: Consider using a password manager to generate and store your passwords securely. This will help you manage the many passwords needed for various educational tools and platforms.
  • Two-Factor Authentication (2FA): Enable 2FA wherever possible. It adds an extra layer of security by requiring you to verify your identity via a second method (such as a text message or an app) in addition to your password.

Be Aware of Phishing Scams

  • Recognize Phishing Attempts: Phishing is when cybercriminals impersonate legitimate entities (like schools, colleagues, or service providers) to steal personal information. Be cautious of unsolicited emails, especially those that ask for login details, financial information, or any personal data.
  • Check Email Addresses Carefully: Often, phishing emails come from addresses that look similar to legitimate ones but with slight variations (e.g., “school@exmaple.com” instead of “school@example.com“).
  • Don’t Click on Suspicious Links: If you receive an email asking you to click on a link, especially if it seems urgent or offers an unexpected attachment, verify its legitimacy before clicking. Contact the sender directly if you’re unsure.

Secure Your Devices

  • Lock Your Devices: Use passwords, PINs, or biometric authentication (fingerprint/face recognition) to lock your devices, such as laptops, tablets, and smartphones. This prevents unauthorized access if your device is lost or stolen.
  • Keep Software Up-to-Date: Always keep your operating systems, browsers, and applications up to date. Software updates often include security patches that protect against known vulnerabilities.
  • Use Antivirus Software: Install reliable antivirus software and perform regular scans. It helps protect against malware, viruses, and other cyber threats.

Manage Wi-Fi Security

  • Use Strong Wi-Fi Passwords: Ensure your home Wi-Fi network is protected with a strong password. This helps prevent unauthorized access to your network.
  • Enable WPA3 Encryption: If possible, use WPA3 encryption for your home Wi-Fi, which is the most secure option. Avoid using outdated WEP encryption.
  • Separate Networks: If you have a smart home device, use a separate network for your personal devices and your educational devices to reduce the risk of cyber threats.

Safely Share Information with Students

  • Use Approved Platforms: Always use school-approved and secure platforms (e.g., Google Classroom, Microsoft Teams, or any Learning Management System) to share materials, assignments, and personal student information.
  • Limit the Sharing of Personal Information: Encourage students to use their first names only or pseudonyms in online settings when appropriate. Avoid sharing full names, addresses, or any private details in online class activities or assignments.

Educate Students About Cybersecurity

  • Teach Safe Online Habits: Educate students about the importance of using strong passwords, recognizing phishing attempts, and keeping personal information private. This is especially crucial as they become more active online.
  • Set Expectations for Online Behavior: Have clear guidelines for online interactions (especially in virtual classrooms or when using communication tools like chat apps). Promote respectful behavior and discourage bullying or harmful behavior.
  • Discuss Cyberbullying: Be aware of the signs of cyberbullying and make sure students know how to report it. Create an open and supportive environment for students to discuss online safety.

Control Access to Your Classroom Technology

  • Set User Permissions: Limit access to sensitive classroom data by setting appropriate user permissions for educational tools. Make sure students and other staff have access only to the materials and information they need.
  • Log Out of Shared Devices: Always log out of accounts when using shared classroom devices or public computers. This ensures that others cannot access your personal accounts or information.
  • Use Secure Video Conferencing Tools: If you use video conferencing tools (Zoom, Google Meet, etc.), make sure to set meeting passwords, use waiting rooms, and disable features that could lead to disruptions (like screen sharing or unmuted microphones).

Back Up Your Work Regularly

  • Cloud Backups: Use a secure cloud service (Google Drive, OneDrive, Dropbox, etc.) to back up important work, lesson plans, and other teaching materials. This protects against data loss due to accidental deletions, hardware failures, or cyberattacks.
  • Local Backups: If you’re concerned about cloud storage, consider backing up your important data to an external hard drive or other offline media.

Use Encryption for Sensitive Data

Encrypt Student Information: If you need to store or transmit sensitive student data (e.g., grades, reports, health information), use encryption tools to secure it. This ensures that even if the data is intercepted, it cannot be accessed or read without the proper decryption key.

Stay Informed About Cybersecurity Threats

Report Security Incidents: If you notice suspicious activity or potential security incidents (such as a phishing attempt or a breach of student data), report it to your school’s IT department immediately.

Keep Up With Threats: Cybersecurity is a constantly evolving field. Stay informed about new threats, vulnerabilities, and best practices by subscribing to educational resources or participating in professional development related to cybersecurity.

Have Questions?

If you have any questions specific to your PSU, please refer to your PSU’s IT Department for accurate recommendations and guidance.

Otherwise, please feel free to email the NCDPI K-12 Cybersecurity Program Team at the following email:

Key Program Contact
NCDPI K-12 Cybersecurity Team
k12cybersecteam@dpi.nc.gov