Successfully reported this slideshow.
We use your LinkedIn profile and activity data to personalize ads and to show you more relevant ads. You can change your ad preferences anytime.

Cloud Security Solutions for Public Institutions | TX DIR Forum 2019

83 views

Published on

Technology plays a role in all facets of operations in public institutions. Among the least understood is how cloud computing and security play a role in cybersecurity and safety.

Published in: Technology
  • Be the first to comment

Cloud Security Solutions for Public Institutions | TX DIR Forum 2019

  1. 1. Cloud Security Solutions for Public Institutions The Role of Technology in Cybersecurity & Safety
  2. 2. Cloud Security Made Easy Agenda ● Intro ● Your Cybersecurity Infrastructure ● Cloud Security: What Is It & Why Do You Need It? ● Discussion On Cybersecurity & Safety ● Case Studies In Local Government & Education ● Q & A
  3. 3. Cloud Security Made Easy Introduction ● Who am I? ○ David Waugh - Cloud Security Jedi @ ManagedMethods ● What is ManagedMethods? ○ Cloud Security Platform specializing in Education, Public Sector, and Mid-Enterprises ○ Protecting over 400+ schools & over 1 million students (TX - 400K Students across 60+ schools) ● Vested Interest ○ I am a father of two children...12 and 8 (7th grade and 2nd grade) ○ Wife is digital librarian / Chromebook admin for 500 student elementary school ● I see the risks everyday...both at work and at home
  4. 4. Cloud Security Made Easy Who Are You? ● System Admin? ○ G Suite? ○ Office 365? (OneDrive? SharePoint?) ○ Slack, Dropbox or others? ● Security? ○ Anti-Phishing? ○ Malware? ○ Content Inspection (DLP)? ● Existing Tools? ● Why This Session?
  5. 5. Cloud Security Made Easy Employee Education Layered Security Firewall Agents/Browser Extensions Device & Hosted Content Filters Proxies Secure Web Gateways Mail Transfer Gateways (MTA) API - Based Content Filters API - Based Cloud Security
  6. 6. Cloud Security Made Easy Why Cloud Security? ● There is no perimeter to secure in the cloud ● Firewalls & legacy gateway / proxies are not able to secure data stored in the cloud ● Provides IT security control over information & account behavior in cloud applications ○ Threat Protection ○ Data Loss Prevention ○ User Behavior & Monitoring ● Compliance & legal reasons
  7. 7. Cloud Security Made Easy Why Cloud Security - Compliance (Now & Future) ● TAC Chapter 202 sets security standards for state agencies & higher ed institutions ● S.B. 820 and H.B. 2689 will raise the bar on how education institutions must address cybersecurity ● Agencies & organizations using Google for Education, Office 365, and other cloud applications will need cloud security infrastructure to meet these requirements Sources ● TAC Chapter 202 ● TX House Bill 2689 ● TX Senate Bill 820
  8. 8. Cloud Security Made Easy What Does Safety Have To Do With Cybersecurity? ● Children who are bullied are 9x more likely to become victims of identity theft/fraud ● Hate speech online impacts workplace safety & productivity ● Unwanted advances or offensive material (sexual, threatening, harassing) ● Criminals & hackers are finding ways to use building smart technology for their own purposes
  9. 9. Cloud Security Made Easy Why Cyber Safety? ● Cyber safety risks include ○ Bullying & hate speech ○ Sexting / sexcasting ○ Inappropriate contact & advances ○ Exposure to explicit content ○ Illegal file sharing ○ Identity theft & fraud ● The anonymity of the internet can result in “disinhibition”; saying things they wouldn’t otherwise say in a personal interaction ● Cyberbullying impacts children and, in some cases, adults. It is “invisible” making it difficult to identify & intervene ● Children are particularly susceptible to several different types of criminals online Definition: The safe and responsible use of technology, of which digital citizenship plays a key role (Miguel Guhlin, Cybersafety & Security) Resources ➔ The Importance of Teaching Cyber Safety and Digital Citizenship ➔ Why is Internet Safety for Kids so Important? ➔ https://www.peoplehr.com/blog/2016/08/26/cyber-bullying-in-the-workplace/
  10. 10. Cloud Security Made Easy Why Cybersecurity? ● 78% increase in cybersecurity incidents ○ Nov 2017 - Jan 2019 ● Legal data privacy requirements ○ FERPA, COPPA, HIPAA, etc ● Work continuity ○ Attacks have shut down offices, agencies, schools and/or networks for hours—sometimes days Definition: The body of technologies, processes and practices designed to protect networks, computers, programs and data from attack, damage or unauthorized access (Miguel Guhlin, Cybersafety & Security) Resources ➔ Five Reasons Schools Need to Address Cybersecurity Now ➔ K-12 Cybersecurity Resource Center ● Employee, faculty, student, and public data security ○ Stolen data results in identity theft & fraud ● Financial damage ○ Stolen paychecks, extortion, threatening violence, holding data ransom ● Personal liability ○ Leaders can be held liable; superintendents & principles can be sued
  11. 11. Cloud Security Made Easy Why Cybersecurity? (continued) ● 418 K12 education cybersecurity incidents since January 2016 (source) ● Student Social Security Numbers can sell on the dark web for $25 - $35 each; information from 1 school can be worth $10,000+ (source) ● Cybersecurity breaches can lead to student safety concerns ○ Ex: Dark Overlord attack ○ Dept. of Education new type of threat alert warns “...threats of violence, shaming, or bullying the children unless payment is received.” Map courtesy of The K-12 Cybersecurity Resource Center
  12. 12. Cloud Security Made Easy Cybersecurity vs. Cyber Safety Cybersecurity: Protects technology infrastructure & protected personal information ● Social Security Numbers ● Names, Addresses, etc. ● HIPAA Health Information ● Networks ● Computers (hardware) ● Cloud applications (G Suite) Cyber Safety: Protects the physical and emotional well being of employees, faculty & students ● Explicit Content ● Threatening Violence ● Self Harm ● Cyberbullying ● Domain Filters ● Email, Docs & Messaging Apps ● Social Media (sometimes) What’s the difference? Resources ➔ Cybersafety & Security ➔ Cyber Safety vs. Cybersecurity: What’s the Difference?
  13. 13. Case Study City of Arvada Arvada is a suburb of Denver with a population of 115,000 and growing. The city’s vision is “We Dream Big and Deliver” The Challenge The Solution Arvada’s transition to G Suite exposed government data to vulnerabilities ● Lacked visibility into content being emailed, shared, and accessed ● Unable to audit compliance with federal, state, and local regulations ● Lacked control over vulnerabilities to breaches, malware, and data loss Deploying ManagedMethods cloud application security solution provides ● Critical visibility and control of G Suite accounts ● Security from malicious or accidental data loss ● Easy setup, management, and scalability “When we launched G Suite we quickly saw the improvements in productivity and collaboration for the city’s staff. But the lack of security on all that data kept me up at night. With ManagedMethods, I’m confident in the security of our shared data now and in the future.” James IT Security Specialist
  14. 14. Case Study Texas Education Service Center Region 12 ESC12 is a nonprofit organization that supports the needs of 76 school districts and more than 22,000 staff and 160,000 students in Texas The Challenge The Solution Use of G Suite lead to vulnerabilities and compliance concerns ● Government regulations requires data compliance with FERPA, CIPA & COPPA ● Lacked visibility into content being emailed, shared, and accessed ● Lacked control over data loss vulnerabilities of sensitive information Deploying ManagedMethods cloud application security solution provides ● Highly customizable data loss prevention policies and malware protection ● Easy setup, management, and scalability ● Superior protection, customer support, and affordability “When I first learned about ManagedMethods I was skeptical that such an inexpensive solution would be able to secure our G Suite data better than Cloudlock. However, after our first week using the solution, I was more than convinced. ManagedMethods has been one of the best technology decisions I’ve made this year.” Ed Newman CSO & Director of Technology Services
  15. 15. Case Study Troy Independent School District Troy ISD is a rural Texas school district running on G Suite, supporting the needs of 1,500 students and 180 staff members The Challenge The Solution Use of G Suite lead to vulnerabilities and compliance concerns ● Insufficient protection from Google’s native security tools ● Lack of visibility and control into data accessed and shared in Google and malware threats through Gmail ● No control over the use of 3rd-party applications that expose vulnerabilities Deploying ManagedMethods cloud security provides the ability to ● Identify and quarantine suspicious emails and file uploads ● See files being shared and accessed, and control 3rd party applications ● Identify and remove inappropriate content from Google Drive “The addition of ManagedMethods to our technology stack has given me confidence in the security of our Google Drive and Gmail data and our ability to protect our students and staff. It is an easy and affordable solution that allows me to focus on other priorities.” Melinda Newman Director of Technology
  16. 16. Cloud Security Made Easy Questions? www.ManagedMethods.com dwaugh@managedmethods.com THANK YOU!
  17. 17. Cloud Security Made Easy Helpful Resources ● Cyber Safety ○ The Importance of Teaching Cyber Safety and Digital Citizenship ○ Why is Internet Safety for Kids so Important? ○ Students Experiencing Distress Need Early Intervention ● Cybersecurity ○ Five Reasons Schools Need to Address Cybersecurity Now ○ K-12 Cybersecurity Resource Center ○ K-12 Cybersecurity Resource Center Map ○ Verizon 2018 Data Breach Investigations Report ● General Interest / Both ○ Cybersafety & Security ○ Cyber Safety vs. Cybersecurity: What’s the Difference? ○ Cloud Security Solutions for the K-12 Education Environment
  18. 18. Cloud Security Made Easy What is ManagedMethods? We Make Cloud Security Easy ● Award-winning cloud security platform specializing in education, public sector, nonprofits & mid-sized companies ● Protecting over 400+ schools & over 1 million students ● Data security, malware threat protection & account monitoring for all your cloud apps

×