Cybersecurity best practices for K-12 schools

The K-12 Cybersecurity Guidebook provides guidance and best practices for school IT administrators on setting up and configuring hardware and software in K-12 institutions to strengthen cybersecurity. It includes both general best practices, as well as specific guidance for Google for Education tools, like Chromebooks and Google Workspace for Education. We’re sharing some of those below:

• Using secure authentication to keep sensitive information safe, protect emails, files and other content, and prevent unauthorized users from accessing education systems. Single Sign On (SSO), password managers and two-step verification are built into our product offering to help keep users safe online.


• Applying appropriate security settings to keep your users, data and environment safe. While Google products are built secure by default, it is critical that admins also properly utilize and configure networks and systems to ensure security. Chromebooks have over 600 policies that admins can apply in Google Admin console to manage user access to apps and services. Google Workspace for Education provides the Advanced Protection Program (APP), which gives additional protection against targeted attacks, among many other security and privacy policies available to IT admins.


• Updating and upgrading systems to ensure users are protected from the latest threats and ransomware attacks. Many schools and school districts, such as the Fairfield-Suisun school district in California, have switched over to Google tools due to their strong security and privacy protections. No ransomware attack has ever been reported on any ChromeOS device, as of August 2023.


• Using real-time alerting and monitoring systems to increase security posture and mitigate potential issues quickly. Google Workspace for Education administrators can use reports and audit logs (including the alert center) to identify security risks, analyze service usage, diagnose configuration problems, and keep students safe.


• Training teachers, staff and students on how to use devices and productivity tools safely, how to recognize threats, and on best practices for file and data sharing. Many teachers and families have leveraged programs like Be Internet Awesome to teach kids the skills they need to stay safe and be responsible online, along with resources and features for digital wellbeing.