Data Protection Reminders
Information Provided by RIC One
NYS RIC Data Security Practices for Educators
Educational agencies are experiencing more frequent cyber attacks. These attacks involve stealing data, holding information systems hostage, and causing disruptions in service. Follow these simple tips to help enhance our district's security posture.
Human behavior is at the root of 95% of all cyber security incidents.
Data Protection Reminders:
- Email Practices: Exercise caution before clicking on a link in an e-mail or opening an attachment. Emails may be disguised by using familiar names. Always check to verify the sender.
- Workstation Practices: Lock workstations when leaving them unattended. Windows +L for PCs. Push the power button to bring up power/sign-out options on your Chromebook.
- Password Practices: Establish strong passwords. Do not write down passwords and leave them in an easily accessible location.
- Data Handling Practices: Use appropriate tools when handling data. Never send sensitive information through unencrypted email. We recommend sharing documents through Google Drive. Make sure to share only with the specific people who are authorized to see the data.
- Privacy Practices: Do not establish accounts for students to access online resources without consulting administration. Due to new regulations put forth by Ed Law 2D, we will need to be diligent about evaluating each resource we utilize to ensure that our students' data is safe.
Phishing Emails
Phishing e-mails are on of the most common, and effective methods cyber attackers will use to gain access to secure information.
- Exercise caution before sending sensitive information through e-mail.
- Exercise caution before clicking on a link in an e-mail or opening an attachment.
- Report suspicious e-mails to your IT Department.
- If you fall victim, report incidents to your IT Department immediately.