Skip To Main Content

Logo Image

Oneida-Herkimer-Madison BOCES logo in white on a dark blue background

Logo Title

Data Security Practices

The increasingly connected, data-rich environments of today's schools, combined with readily-available exploitation tools, are causing districts to become more frequent targets of cyberattacks. These attacks can range from stealing or modifying data and holding information systems hostage to simply causing disruption.

Regardless of the type of attack or the motive of the attacker, districts need to protect their information. Here are some relatively simple tips and best practices to help guide districts through enhancing the security of their environments.

Personal, Private, or Sensitive Information

It is vital to safeguard all sensitive information from unauthorized access, disclosure, modification, and destruction to prevent access disruptions that could severely impact critical functions of a school district.

In addition to student information protected under NYS Education Law 2-d or FERPA, districts should safeguard all sensitive information, including:

  • Student Data: Demographics, grades, and discipline records.

  • Sensitive Student Info: Custody information, Special Education data, and health or disability information.

  • District Records: Financial information, teacher ratings, and performance evaluations.