Security Magazine logo
  • Sign In
  • Create Account
  • Sign Out
  • My Account
  • NEWS
  • MANAGEMENT
  • PHYSICAL
  • CYBER
  • BLOG
  • COLUMNS
  • EXCLUSIVES
  • SECTORS
  • EVENTS
  • MEDIA
  • MORE
  • EMAG
  • SIGN UP!
cart
facebook twitter linkedin youtube
  • NEWS
  • Security Newswire
  • Technologies & Solutions
  • MANAGEMENT
  • Leadership Management
  • Enterprise Services
  • Security Education & Training
  • Logical Security
  • Security & Business Resilience
  • Profiles in Excellence
  • PHYSICAL
  • Access Management
  • Fire & Life Safety
  • Identity Management
  • Physical Security
  • Video Surveillance
  • Case Studies (Physical)
  • CYBER
  • Cybersecurity News
  • More
  • COLUMNS
  • Cyber Tactics
  • Leadership & Management
  • Security Talk
  • Career Intelligence
  • Leader to Leader
  • Cybersecurity Education & Training
  • EXCLUSIVES
  • Annual Guarding Report
  • Most Influential People in Security
  • The Security Benchmark Report
  • Top Guard and Security Officer Companies
  • Top Cybersecurity Leaders
  • Women in Security
  • SECTORS
  • Arenas / Stadiums / Leagues / Entertainment
  • Banking/Finance/Insurance
  • Construction, Real Estate, Property Management
  • Education: K-12
  • Education: University
  • Government: Federal, State and Local
  • Hospitality & Casinos
  • Hospitals & Medical Centers
  • Infrastructure:Electric,Gas & Water
  • Ports: Sea, Land, & Air
  • Retail/Restaurants/Convenience
  • Transportation/Logistics/Supply Chain/Distribution/ Warehousing
  • EVENTS
  • Industry Events
  • Webinars
  • Solutions by Sector
  • Security 500 Conference
  • MEDIA
  • Videos
  • Podcasts
  • Polls
  • Photo Galleries
  • Videos
  • Cybersecurity & Geopolitical Discussion
  • Ask Me Anything (AMA) Series
  • MORE
  • Call for Entries
  • Classifieds & Job Listings
  • Continuing Education
  • Newsletter
  • Sponsor Insights
  • Store
  • White Papers
  • EMAG
  • eMagazine
  • This Month's Content
  • Advertise
Security Magazine logo
search
cart
facebook twitter linkedin youtube
  • Sign In
  • Create Account
  • Sign Out
  • My Account
Security Magazine logo
  • NEWS
    • Security Newswire
    • Technologies & Solutions
  • MANAGEMENT
    • Leadership Management
    • Enterprise Services
    • Security Education & Training
    • Logical Security
    • Security & Business Resilience
    • Profiles in Excellence
  • PHYSICAL
    • Access Management
    • Fire & Life Safety
    • Identity Management
    • Physical Security
    • Video Surveillance
    • Case Studies (Physical)
  • CYBER
    • Cybersecurity News
    • More
  • BLOG
  • COLUMNS
    • Cyber Tactics
    • Leadership & Management
    • Security Talk
    • Career Intelligence
    • Leader to Leader
    • Cybersecurity Education & Training
  • EXCLUSIVES
    • Annual Guarding Report
    • Most Influential People in Security
    • The Security Benchmark Report
    • Top Guard and Security Officer Companies
    • Top Cybersecurity Leaders
    • Women in Security
  • SECTORS
    • Arenas / Stadiums / Leagues / Entertainment
    • Banking/Finance/Insurance
    • Construction, Real Estate, Property Management
    • Education: K-12
    • Education: University
    • Government: Federal, State and Local
    • Hospitality & Casinos
    • Hospitals & Medical Centers
    • Infrastructure:Electric,Gas & Water
    • Ports: Sea, Land, & Air
    • Retail/Restaurants/Convenience
    • Transportation/Logistics/Supply Chain/Distribution/ Warehousing
  • EVENTS
    • Industry Events
    • Webinars
    • Solutions by Sector
    • Security 500 Conference
  • MEDIA
    • Videos
      • Cybersecurity & Geopolitical Discussion
      • Ask Me Anything (AMA) Series
    • Podcasts
    • Polls
    • Photo Galleries
  • MORE
    • Call for Entries
    • Classifieds & Job Listings
    • Continuing Education
    • Newsletter
    • Sponsor Insights
    • Store
    • White Papers
  • EMAG
    • eMagazine
    • This Month's Content
    • Advertise
  • SIGN UP!
CybersecurityManagementSecurity Enterprise ServicesSecurity Leadership and ManagementLogical SecurityCybersecurity NewsEducation: K-12Education:University

Leveraging zero trust to reduce cyberattacks in the education sector

By Hernan Lendono
education-security-4freepik1170x658.jpg

Image by vectorjuice via Freepik

November 30, 2022

The start of a new school year often brings anxious excitement to students and faculty alike.


Unfortunately, with the growing threat of cyberattacks across K-12 and higher education, this sentiment leans more anxious than excited by the year. In fact, according to the nonprofit education EDUCAUSE, in nine of the last 10 years, cybersecurity has been a top 10 issue for education institutions, with it being the number one concern for the last seven. 


Curbing this concern is far deeper than just ensuring schools and universities have the right cybersecurity hardware and software. It also means considering how competition for IT and cybersecurity talent contributes to weakened defense and how regulatory compliance related to state, federal and international laws like California Consumer Privacy Act (CCPA), Florida Information Protection Act (FIPA), Health Insurance Portability and Accountability Act (HIPPA), Gramm-Leach-Bliley Act (GLBA) and General Data Protection Regulation (GDPR) complicates the ability to rapidly build and support a strong security posture.


Even measures like cyber insurance have their drawbacks. Many institutions are finding compliance difficult through increases in premiums or deductibles and increasing control and technical requirements for underwriting. This all occurs in an environment where education budgets are already flat or declining due to other issues, such as reduced enrollment and retention.


With these constraints in focus, what can the education sector do to mitigate cyber risk? 


The adoption of a zero trust cybersecurity framework is a start.

 

What does zero trust mean?

Far from being the latest buzzword running around the cybersecurity community, zero trust provides an architectural approach to address the need for a unified security solution in today’s fragmented space. Zero trust brings explicit control to the IT environment where all devices and entities must be known — authenticated and authorized; their behavior must be explicitly allowed; and their actions must be understood and monitored. These principles are in stark contrast to what most organizations follow today.


For zero trust to work, an organization must first have three distinct components in place: business controls, a common control plane and an infrastructure that participates. Then, zero trust, which is comprised of seven pillars, can automate the application of security and business policy to protect the data. These seven pillars, as defined by the U.S. Department of Defense, can be explained as two distinct pieces: the infrastructure — the user, device, network/environment, and application/workload pillars, and the action of automating the management of the infrastructure — the visibility & analytics and automation & orchestration pillars.


In practical terms, this means that when the enterprise first establishes business controls, an end user may only have access to specific enterprise resources because of the user’s role or requirements — for example, accessing certain types of data based on approved credentials.


With those “rules” established, the control plane manages those decisions. Then, zero trust comes into play. So, even if it’s an approved user, access may still depend on whether the request comes from a recognized IP address via a recognized device. If just one of those conditions is not satisfied, the user is restricted from accessing it. An abnormal action like that gets logged and provides telemetry. It becomes “visibility” that either signals the automation to do something or is used to construct AI and machine learning models so that the enterprise can better understand good and bad behavior and ultimately improve the automation.

 

The longevity of zero trust 

So, the question remains — what can K-12 school systems and higher education institutions do to implement a Zero Trust environment to provide long-lasting, secure networks? 


The first thing to understand is that there is no zero trust product or single solution. Instead, there are products or solutions which support, advance and implement the principles outlined in zero trust. 


Because of its flexibility, an organization can start architecting zero trust principles in a phased approach. Institutions can start by covering users or workloads, for example, until optimally covering all seven principles previously mentioned. An organization should also prioritize its critical usage cases and address those first. Examples such as student and employee data, campus security automation, and campus or district-wide computer networks should be near the top of the list.


While applying zero trust should ultimately be completed for all use cases, it is important to note that due to the nature of denying implicit trust, a breach will have much more difficulty spreading from one workload to another when core workloads are protected.


The key thing to remember is that because it is a cybersecurity framework, zero trust is meant to be flexible, and as such, is best used in combination with other popular cybersecurity frameworks such as the Cybersecurity Framework | NIST, CMMC 2.0, CIS 8.0 and others to achieve maximum benefit.

 

Steps to take today to secure education institutions 

While implementing a zero trust framework is ideal, the truth is it will take most school systems and higher education institutions time to adopt zero trust and integrate it with existing security measures. However, there are some steps that organizations can take immediately to protect teachers and students.


With the awareness that threats continue to evolve at a rapid pace, institutions should:

  • Assess internally where zero trust enabling technology is already present in the organization
  • Identify gaps and prioritize areas where zero trust should be implemented first
  • Work in a phased approach to first apply zero trust principles to critical use cases and workloads
  • Seek the guidance of a trusted cybersecurity partner leveraging a common and proven zero trust framework.


It’s crucial for our education leaders to support a modernized cybersecurity posture grounded in a strategy that still allows for dynamic organizational innovation. While there is not one universal entry point for implementing zero trust, there are many equally valid ones that K-12 and higher education institutions can take. The most important step is simply taking one, so your institution can safeguard itself against today’s evolving threat landscape.

KEYWORDS: cyber security higher education k-12 security risk management zero trust

Share This Story

Looking for a reprint of this article?
From high-res PDFs to custom plaques, order your copy today!

Hernan Lendono, Senior Strategist, Higher Education at Dell Technologies, has more than 20 years of experience in the cybersecurity field.

Recommended Content

JOIN TODAY
To unlock your recommendations.

Already have an account? Sign In

  • Security's Top Cybersecurity Leaders 2024

    Security's Top Cybersecurity Leaders 2024

    Security magazine's Top Cybersecurity Leaders 2024 award...
    Security Leadership and Management
    By: Security Staff
  • cyber brain

    The intersection of cybersecurity and artificial intelligence

    Artificial intelligence (AI) is a valuable cybersecurity...
    Security Enterprise Services
    By: Pam Nigro
  • artificial intelligence AI graphic

    Assessing the pros and cons of AI for cybersecurity

    Artificial intelligence (AI) has significant implications...
    Cybersecurity Education & Training
    By: Charles Denyer
close

1 COMPLIMENTARY ARTICLE(S) LEFT

Loader

Already Registered? Sign in now.

Manage My Account
  • Security eNewsletter & Other eNews Alerts
  • eMagazine Subscriptions
  • Manage My Preferences
  • Online Registration
  • Mobile App
  • Subscription Customer Service

Security’s Top 5 – 2024 Year in Review

Security’s Top 5 – 2024 Year in Review

Middle East Escalation, Humanitarian Law and Disinformation – Episode 25

Middle East Escalation, Humanitarian Law and Disinformation – Episode 25

The Money Laundering Machine: Inside the global crime epidemic - Episode 24

The Money Laundering Machine: Inside the global crime epidemic - Episode 24

More Videos

Sponsored Content

Sponsored Content is a special paid section where industry companies provide high quality, objective, non-commercial content around topics of interest to the Security audience. All Sponsored Content is supplied by the advertising company and any opinions expressed in this article are those of the author and not necessarily reflect the views of Security or its parent company, BNP Media. Interested in participating in our Sponsored Content section? Contact your local rep!

close
  • Sureview screen
    Sponsored bySureView Systems

    The Evolution of Automation in the Command Center

  • Crisis Response Team
    Sponsored byEverbridge

    Automate or Fall Behind – Crisis Response at the Speed of Risk

  • Perimeter security
    Sponsored byAMAROK

    Why Property Security is the New Competitive Advantage

Popular Stories

Rendered computer with keyboard

16B Login Credentials Exposed in World’s Largest Data Breach

Verizon on phone screen

61M Records Listed for Sale Online, Allegedly Belong to Verizon

Security’s 2025 Women in Security

Security’s 2025 Women in Security

Red spiderweb

From Retail to Insurance, Scattered Spider Changes Targets

blurry multicolored text on black screen

PowerSchool Education Technology Company Announces Data Breach

2025 Security Benchmark banner

Events

July 17, 2025

Tech in the Jungle: Leveraging Surveillance, Access Control, and Technology in Unique Environments

What do zebras, school groups and high-tech surveillance have in common? They're all part of a day’s work for the security team at the Toledo Zoo.

August 7, 2025

Threats to the Energy Sector: Implications for Corporate and National Security

The energy sector has found itself in the crosshairs of virtually every bad actor on the global stage.

View All Submit An Event

Products

Security Culture: A How-to Guide for Improving Security Culture and Dealing with People Risk in Your Organisation

Security Culture: A How-to Guide for Improving Security Culture and Dealing with People Risk in Your Organisation

See More Products

Related Articles

  • zero trust-freepik1170x658v59703.png

    The fundamentals of implementing a zero trust security policy

    See More
  • Computer keyboard

    NIST & zero trust: What federal agencies can learn from the private sector

    See More
  • Zero-trust-freepik

    Good-bye, trust-based security – WFH may usher in the age of zero trust

    See More

Related Products

See More Products
  • facility manager.jpg

    The Facility Manager's Guide to Safety and Security

  • security culture.webp

    Security Culture: A How-to Guide for Improving Security Culture and Dealing with People Risk in Your Organisation

  • 150 things.jpg

    The Handbook for School Safety and Security

See More Products

Events

View AllSubmit An Event
  • July 17, 2025

    Tech in the Jungle: Leveraging Surveillance, Access Control, and Technology in Unique Environments

    What do zebras, school groups and high-tech surveillance have in common? They're all part of a day’s work for the security team at the Toledo Zoo.
View AllSubmit An Event
×

Sign-up to receive top management & result-driven techniques in the industry.

Join over 20,000+ industry leaders who receive our premium content.

SIGN UP TODAY!
  • RESOURCES
    • Advertise
    • Contact Us
    • Store
    • Want More
  • SIGN UP TODAY
    • Create Account
    • eMagazine
    • eNewsletter
    • Customer Service
    • Manage Preferences
  • SERVICES
    • Marketing Services
    • Reprints
    • Market Research
    • List Rental
    • Survey/Respondent Access
  • STAY CONNECTED
    • LinkedIn
    • Facebook
    • YouTube
    • X (Twitter)
  • PRIVACY
    • PRIVACY POLICY
    • TERMS & CONDITIONS
    • DO NOT SELL MY PERSONAL INFORMATION
    • PRIVACY REQUEST
    • ACCESSIBILITY

Copyright ©2025. All Rights Reserved BNP Media.

Design, CMS, Hosting & Web Development :: ePublishing

Security Magazine logo
search
cart
facebook twitter linkedin youtube
  • Sign In
  • Create Account
  • Sign Out
  • My Account
Security Magazine logo
  • NEWS
    • Security Newswire
    • Technologies & Solutions
  • MANAGEMENT
    • Leadership Management
    • Enterprise Services
    • Security Education & Training
    • Logical Security
    • Security & Business Resilience
    • Profiles in Excellence
  • PHYSICAL
    • Access Management
    • Fire & Life Safety
    • Identity Management
    • Physical Security
    • Video Surveillance
    • Case Studies (Physical)
  • CYBER
    • Cybersecurity News
    • More
  • BLOG
  • COLUMNS
    • Cyber Tactics
    • Leadership & Management
    • Security Talk
    • Career Intelligence
    • Leader to Leader
    • Cybersecurity Education & Training
  • EXCLUSIVES
    • Annual Guarding Report
    • Most Influential People in Security
    • The Security Benchmark Report
    • Top Guard and Security Officer Companies
    • Top Cybersecurity Leaders
    • Women in Security
  • SECTORS
    • Arenas / Stadiums / Leagues / Entertainment
    • Banking/Finance/Insurance
    • Construction, Real Estate, Property Management
    • Education: K-12
    • Education: University
    • Government: Federal, State and Local
    • Hospitality & Casinos
    • Hospitals & Medical Centers
    • Infrastructure:Electric,Gas & Water
    • Ports: Sea, Land, & Air
    • Retail/Restaurants/Convenience
    • Transportation/Logistics/Supply Chain/Distribution/ Warehousing
  • EVENTS
    • Industry Events
    • Webinars
    • Solutions by Sector
    • Security 500 Conference
  • MEDIA
    • Videos
      • Cybersecurity & Geopolitical Discussion
      • Ask Me Anything (AMA) Series
    • Podcasts
    • Polls
    • Photo Galleries
  • MORE
    • Call for Entries
    • Classifieds & Job Listings
    • Continuing Education
    • Newsletter
    • Sponsor Insights
    • Store
    • White Papers
  • EMAG
    • eMagazine
    • This Month's Content
    • Advertise
  • SIGN UP!