Cybersecurity Compliance is Only Half the Battle for EdTech

TechCrunch recently reported on accusations levied by the Federal Trade Commission against edtech giant Chegg – the FTC filed a legal complaint earlier this week indicating that Chegg’s lapses in cybersecurity compliance has resulted in numerous separate data breaches in recent years, and that these breaches were avoidable with better cybersecurity practices.

Sai Huda, CEO of CyberCatch, explains that cybersecurity compliance is only the first step in ensuring data security for edtech customers. The knack is ongoing maintenance and management of those security systems to identify and plug holes as needed – with thousands of attacks levied against educational institutions, hackers will always find vulnerabilities and exploit them.

Sai’s Thoughts

“Along with that, there’s gotta be two other things they’ve gotta do. One is they’ve gotta test those controls regularly. So just implementing the hundred eight controls and thinking you’re in compliance, it is just step one, the step 2, 3, 4, 5, 6, 7, 8, 9, 10 are to continuously test those controls because controls will break.

So, the key is to find those control failures, those security holes before the attackers do, and then plug them, and therefore the attackers will not be able to exploit those security holes and will not be able to be successful. The third thing the school sector must do is to have an incident response plan because it’s not a question of if, but when an incident will happen.

So the key is to be able to detect this incident and then to be able to respond so that damage is mitigated so that perhaps ransomware isn’t spread. Perhaps it can be curtailed. Data can be prevented from being stolen. Incident response plan is also key, and it must be implemented. That’s the way to be successful.

K12 schools are definitely in line of sight of attackers. CyberCatch scanned over 11,000 websites, internet facing assets of K-12 schools in the US and we found over 60% having vulnerabilities attackers can easily exploit break in, install ransomware and steal data.

So, this along with the FTCs order, should be a wakeup call for the whole K-12 sector to be proactive.”

Follow us on social media for the latest updates in B2B!


construction innovation
Boxx Modular’s New Branch in Atlantic Canada: A Strategic Move for Construction Innovation
December 4, 2023

In an era where construction innovation is reshaping the industry, modular construction’s growth continues to rise. In this episode of Built Modular, Boxx Modular’s strategic expansion into Moncton, Atlantic Canada takes center stage. Host Gabrielle Bejarano welcomes Charles Landry and Ray Girouard to explore the implications of this venture. Bejarano, Landry, and Girouard discuss […]

Read More
Venture Fund Valuations
VC Investment Valuations Podcast
December 4, 2023

In this episode of The Alternative Edge, a Weaver: Beyond the Numbers Podcast, host Becky Reeder, an audit partner and co-leader of the alternative investments practice at Weaver, engages with Sindhu Rajesh, an Alternative Investment Services Partner with Weaver. They unpack the complexities of venture fund valuations, offering critical insights into industry dynamics and best […]

Read More
The Role of VR and AR in Attractions and Enterprise Applications
December 4, 2023

In this Pro AV Today soundbite from Dan O’Brien of HTC VIVE, the conversation centered on the significant role of Virtual Reality (VR) and Augmented Reality (AR) in attractions and enterprise applications. O’Brien highlighted the critical need for durable hardware design, tailored to withstand extensive use in location-based entertainment (LBE) operations. Unlike consumer-grade VR headsets, […]

Read More