The recent government attention on K–12 cybersecurity has, in many ways, benefited school districts by raising awareness of security threats. However, schools can’t take action to meet the government’s recommendations without funding. They don’t have the budgets to implement the cybersecurity solutions the Cybersecurity and Infrastructure Security Agency deemed necessary.
“One of terms you see a lot is ‘unfunded mandate,’” says Jim Siegl, a senior technologist for the Future of Privacy Forum. “Regulation gets passed, and there aren’t any additional resources for schools to hire a privacy officer or someone to manage cybersecurity measures.”