Page 65 - Security Today, November/December 2023

“THIS INFORMATION CAN BE SOLD ON THE DARK WEB FOR A QUICK PROFIT OR USED TO COMMIT OTHER CRIMES SUCH AS FRAUD OR IDENTITY THEFT.” a popular target to cybercriminals but the exceptional amount of Personal Identifiable Information (PII). This includes student and faculty records, as well as financial information. This information can be sold on the dark web for a quick profit or used to commit other crimes such as fraud or identity theft. Cyberattacks on educational institutions can have far-reaching consequences and can have a lasting impact on the establishment. Ultimately, the highest price is being paid by students. DISRUPTING ACCESS TO THE SYSTEM Primarily cybercriminals look to disrupt access to systems; sys- tems that would otherwise allow teachers to deliver slides, stu- dents to submit vital assignments, or access supporting resources. Ransomware attacks against the education sector have been known to lock teachers out of online resources, forcing classes, and even entire campuses, to temporarily close. While immediate disruption is a huge concern, these institu- tions also suffer from reputational loss and significant media atten- tion. The education of students has already been greatly impacted by the pandemic and hence further closures due to cyberattack cannot be afforded. As mentioned above, the education sector holds an immense amount of PII and this can be incredibly damaging if breached. If the institution is a victim of a cyberattack involving ransomware, there is then the incredibly difficult dilemma as to what to do about it – accede to the criminal’s demands or potentially suffer major continued disruption. Education organizations must ensure that their staff mem- bers follow basic security measures to protect the institution. Basic cyber hygiene has proven to be extremely effective in protecting the education sector against cyberattacks. Simple measures such as multi-factor authentication (MFA), enhances security by neces- sitating multiple verification forms. The human element is equally important. Educating staff and students about cybersecurity threats is vital for an organization’s safety. Cyber awareness training equips individuals to understand potential risks, their impact on the institution, and the preventive measures to secure their digital environment. In additional educational facilities need to integrate Unified Secure Access Service Edge (SASE). Unified SASE marries together network security and Wide Area Network (WAN) functionalities into a single cloud-native service, helping educational institutes build a robust security posture. POSING UNIQUE CHALLENGES Managing cybersecurity within the education sector poses unique challenges due to the expansive nature of the technological infra- structure. However, Unified SASE offers a streamlined approach to secure all types of remote access, from staff computers to stu- dent mobile devices. One of the most effective features of Unified SASE is micro- segmentation. This breaks down the network into smaller, secure parts. When an educational institute has multiple devices — used by both students and staff — connected to its network, micro- segmentation becomes crucial. It acts as a safeguard, ensuring that if one device is compromised, the threat is contained within a specific segment of the network. This minimises disruption and keeps educational tools functional. Cybercriminals are not just attacking laptops or end-users but are going after the so-called IoT (internet of things) meaning that any device attached to the network (e.g., a printer) is a po- tential source of vulnerability. That vulnerability is exacerbated by the fact that these devices are not smart and therefore cannot be easily secured. You must have a consistent policy to identify the device and be able to isolate it on the network to its core function – this is what micro-segmentation essentially does. Solutions such as unified SASE contains robust security measures such as advanced threat protection and intrusion pre- vention, allowing security teams to identify and neutralize threats before they inflict damage. This secures universities’ data and sys- tems without slowing down connectivity, therefore not negatively impacting on teachers accessing online resources or the teaching of remote classes. KEEPING COSTS DOWN These and other organizations are focused on keeping costs down. By consolidating various security services into a single platform, educa- tion institutions can optimise their security operations and decrease the expenses of managing multiple security solutions – lowering the Total Cost of Ownership (TCO). It can also support security teams that are over-stretched, by allowing them to focus on more critical tasks. By prioritizing cybersecurity meas- ures and investing in the necessary re- sources the education sector can reduce the risk of falling victim to a cyberattack and ensure a safe and secure learning environment for their students. COVER STORY 21