2023年3月6日

在新聞|第三方風險是什麼,學校需要知道什麼?k - 12 IT團隊必須分析應用程序如何使用和存儲之間的數據來保護自己和自己的學生從網絡攻擊聯邦政府的推動在k - 12學校網絡安全與地區持續的高調的網絡攻擊,關注的焦點是保護學生的數據。作為回應,IT團隊雇傭更多的措施來保證學生的數據安全。LearnPlatform最近進行的一項調查發現,盡管已知風險的擔憂,地區訪問的平均每月1417艾德科技工具在2021 - 2022學年。頂部的工具在許多類別的檢查在LearnPlatform”EdTech前40名:2022年秋季報告”是軟件即服務應用程序。盡管許多這樣的應用程序極大地推進現代課堂的教學和學習,他們也可以威脅到學校不知道要尋找什麼。地區領導人和IT管理員需要開發第三方風險管理程序來確保適當的保護他們的網絡。評估第三方風險,為學生意味著什麼數據,學校領導必須首先理解它是什麼,為什麼它讓他們脆弱,以及如何減輕它。第三方風險是什麼?第三方風險是一個學校或組織所麵臨的風險從任何外部黨派或係統。 There are two primary avenues of third-party risk for school districts , says David Waugh, chief revenue officer of ManagedMethods: “There are third-party risks with known vendors, meaning those that schools know about and have a signed agreement with. Then there are the third-party applications and vendors that have access to a school’s system that they don’t know about.” Whether the vendors are known or flying under the radar, schools need to understand how these vendors use data and how much access they have to schools’ networks — and when districts are managing upward of 1,400 edtech tools in their ecosystems, that adds an additional layer of risk. “Complexity is its own risk,” says Jim Siegl, a senior technologist for the Future of Privacy Forum . “Sharing data with more places increases the risk exponentially. Schools need to look at the way data is collected, used, protected, shared, retained, and deleted.” Why Are K–12 Schools Vulnerable to Third-Party Risk? The number of applications being used isn’t the only factor putting K–12 institutions at risk of a third-party breach . Many districts, especially small ones, also must deal with a lack of security expertise on their IT teams…