Source
Administrator Magazine
Scholastic Administrator is a must-read resource for 240,000 of today's results-driven school leaders. Every issue features leadership for education executives, insight and analysis into what's next in education, and reporting on cutting-edge technologies in real life applications.

Never Safe Enough

By Pamela H. Derringer | September 2007
Is there cyber-safety?<br />
Is there cyber-safety?

A school district in Toronto works on security.

For Toronto Catholic District School Board, in Canada, which stores scads of confidential information for some 93,000 students plus staff, there is no moat deep enough to protect its data. “This is information that parents are mandated to provide us,” says John Brighton, senior systems manager for the district. “We have a responsibility to protect it and ensure that it’s not leaked out.”

Following a threat assessment audit to its information system in 2004, the school board opted to beef up protection. In the past, consultants would review system software on an ad hoc basis, but as Web applications grew in complexity, and hackers became more sophisticated, the district needed to implement a process to automate software vulnerability assessments with frequent security checks that would protect it against the latest hacks.

Part of the solution is a pilot system developed by Cenzic Inc. The program was developed to continually spot system vulnerabilities in the 32 different Web-based applications that handle highly sensitive and important data— everything from grades to suspensions to emergency contact numbers. This way the district’s computer sciences department can stay ahead of malicious hackers, malignant viruses, or sloppy code writing. “We do have the protection of the network but hackers are sophisticated,” says Brighton. “[They] could initiate attacks from the inside or the outside. And one occurrence is too many.

”The need for software vulnerability testing never ends, Brighton says, because software is constantly evolving. At $25,000 for a two-seat license, the savings over a one-time audit ranging from $25,000 to $50,000 per application is “astronomical."

About the Author

Pamela Derringer is a contributing writer for Scholastic Adminstr@tor magazine.

  • Teacher Store
  • The Teacher Store  
    Access Workshop for Teachers

    Access Workshop for Teachers

    Finally the book you've been asking for! This easy to use book shows you step-by-step how to make the most of Microsoft Access in the classroom. Quickly and easily learn to:

  • Organize and analyze student data
  • Keep track of classroom materials and equipment
  • Create student-centered databases to help students improve their research and analytical skills
  • Do mail merges, and more!

    Each book comes with a CD-ROM (Mac/Win compatible) packed with clip art, templates, and sample files f

    $35.00
    Professional Book | Grades K-12
    Add To Cart
    Educators Only
  • Access Workshop for Teachers
    Grades K-12 $35.00
    Add To Cart
  • Teacher Store
  • The Teacher Store  
    Word Workshop for Teachers

    Word Workshop for Teachers

    Word Workshop for Teachers helps you turn a common productivity tool into an uncommonly valuable resource. Quickly and easily learn to:

  • Create newsletters and mail-merge letters
  • Create Web Quests and Web pages
  • Incorporate graphics, movies, and Internet links
  • And more!

    Each book comes with a CD-ROM (Mac/Win compatible) packed with clip art, templates, and sample files from students and teachers around the country!


    Microsoft Word software not included.

    $35.00
    Professional Book | Grades K-12
    Add To Cart
    Educators Only
  • Word Workshop for Teachers
    Grades K-12 $35.00
    Add To Cart
Help | Privacy Policy
EMAIL THIS

* YOUR NAME

* YOUR EMAIL ADDRESS

* RECIPIENT'S EMAIL ADDRESS(ES)

(Separate multiple email addresses with commas)

Check this box to send yourself a copy of the email.

INCLUDE A PERSONAL MESSAGE (Optional)


Scholastic respects your privacy. We do not retain or distribute lists of email addresses.