Cyber Security and Safety in Schools and Educational Institution

PPT on Cyber Security and Safety

1. Cyber Security and Safety for School Protecting Our Students in the Digital Age

2. WHAT IS CYBER SAFETY Cyber safety is the safe and responsible use of information and communication technology. It is not just about keeping information safe and secure, but also about being responsible with that information , being respectful of other people online and practicing good 'netiquette' (internet etiquette).

3. TYPES OF CYBER CRIME

4. PHISHING Phishing is a common method that cybercriminals use to do the fraudulent activity by creating authentic-looking emails or websites to trick victims into sharing personal information or financial data.

5. VISHING Fraudsters contact the victim pretending to be calling from trusted sources like bank/ income tax/ Gas agency etc . They ask victim's for bank account details & collect financial information about debit/credit cards, expiry date etc. The fraudster tells the victim to share OTP sent on mobile for depositing the amount . Once the victim shares the OTP, money is deducted from their account .

6. MALICIOUS MOBILE APPLICATIONS Infected mobile applications may contain malware that can steal your data, login credentials and autosubscribe to premium services .

7. MALWARE Malware is a piece of malicious code inserted in an application, program or system by threat actors. They can infect your systems and perform malicious operations.

8. CYBERBULLYING Cyberbullying is when someone uses technology to harass, threaten, embarrass, or target another person. It happens on devices like smartphones, computers, tablets, and gaming systems. Cyberbullying hurts people, and in some cases is against the law.

9. NEED OF CYBER SECURITY IN SCHOOL Cybersecurity is crucial in any business setting, but especially in education. Cyberattacks not only compromise the safety and security of teachers and school administrations, but also the privacy of students—particularly minors in K–12 institutions. Today millions of students are learning through technology in hybrid, remote, or in-class environments, which is why keeping their devices secure is paramount for students’ learning experiences and teachers’ work.

10. According to the analysis, Madhya Pradesh reported 147 cases out of a total of 1360 cases reported across the country, where children have been victims of cybercrime in 2022. This figure is the third highest in the country with Karnataka and Rajasthan reporting 239 and 161 cases of cybercrime against children.12 Feb 2024

11. Safety tips related with Phishing Carefully check the URL before clicking on it. Never react to the messages which shows urgency. Do not trust promotional offers which look “too good to be true”. Do not hesitate to report to Law Enforcement Agencies, if you become a victim of phishing. Verify the email ids in emails addressed to generic recipients. Look for typing errors ( eg ., Acc0unt, ema1l, dep0sit, passw0rd) “Do yu kare about yurself ?” Look for poor grammar and unprofessional Language.

12. Safety tips related with Vishing Never share OTP, PIN, CVV, Debit/Credit card details with anyone . Do not share any OTP/UPI PIN for receiving money. Do not respond to any calls asking to confirm or share bank account , credit/debit card details or sensitive information. Do not provide personal information in order to receive prize / lottery / gifts/ updating KYC etc., Do not call the numbers of service providers randomly found in search engines as they can be fake numbers. Use the customer care service numbers available on authorized websites of the institute/ organizations/ banks etc. In case of any incident, user should call 1930 and change the password of their account immediately or block the card/freeze the account to prevent financial loss. Users should regularly review bank & credit card statement & report any irregularities. Beware of calls asking to share personal information or asking to install any remote access apps on the pretext of helping.

13. Avoid sharing your personal information like address, mobile number , personal mail id and other sensitive identity related information on social media. Do not share your personal pictures online publicly on social media accounts. Never accept friend requests without appropriate verification and confirmation . Use different passwords for different social media accounts and emails . Enable multi-factor authentication for social media accounts. Disable profile visibility from public searches. Log out after each session . Apply maximum caution while sharing photographs, videos, status, comments etc. Safety tips related with Social Media Frauds

14. Safety tips related with CYBERBULLYING Do not Respond Screenshot Block and Report Talk about it Be Private Be Aware and Alert

15. Do’s and Don’t for Teachers and School Use a strong and unique password combinations of numbers, uppercase , lowercase letters and special characters for each account . Use separate email accounts for personal and official purpose . Never use your official email address for social media sites . Delete old accounts that you do not use any more . Obtain software from trusted sources. Always scan files before opening them . Take regular backups of all important files onto offline / cloud storage . Don't cyber bully by being rude,or by using abusive, threatening , humiliating language . Don't engage or argue with cyberbullies as that might encourage even worse behavior.

16. Do’s and Don’t for Teachers and School Monitor students’ behavioral changes or attitude differences. Do report cyber bullying to the proper authorities. Keep a record of every comment received from a cyberbully for taking further action . Report any objectionable child-abusive materials in electronic form to the concerned authorities . Use encryption such as SSL or VPN for remote access to office or school lab , through internet . Ensure that third-party vendors (who have contract with the school) have strong security measures in place . Consider contracting with a trusted / verified third-party vendor to monitor the security of your school’s network.

17. Do’s and Don’t for Teachers and School Change the administrator’s password from the default password. If the wireless network does not have a default password, create one and use it to protect the network . Disable file sharing on computers . Turn off the network during extended periods of non-use etc. Use "restricted mode", " safesearch ", "supervised users" and other similar filters and monitoring systems, so that no child can access harmful content via the school’s IT systems and any concerns can be detected quickly . Never store critical information in system’s C drive . Backup critical data (contact numbers, email IDs, aadhaar number etc .) in an off-site location.

18. Do’s and Don’t for Teachers and School Frame cyber safety rules as Do’s and Don’ts for the Schools . Orient school administrators with latest tools that can be used to monitor the sites visited by the students / teachers. Introduce courses / lessons / activities for students and teachers on major components of cyber security and safety . Celebrate Safer Internet Day (February 5th) and conduct activities to create awareness through cyber clubs. Establish a relationship with a reputable cybersecurity firm / organisation . Follow guidelines, policies and procedures to keep the school safe and secure in cyberspace.

19. Steps to be taken by school in case of cyber crime is reported

20. The IT Act The IT Act is the primary legislation governing various cyber activities and offenses in India. It defines offenses such as hacking, data theft, identity theft, and cyberterrorism and prescribes penalties for offenders. Additionally, it provides legal recognition for electronic documents, digital signatures, and electronic governance .

21. Digital Personal Data Protection (DPDP ) Act 2023 to protect the rights of individuals to protect their personal data If that data is collected it has to be used for lawful purposes only. Implement technical and organisational measures to safeguard personal data of their clients/customers. A proper agreement should be signed between the organisation and the individual(s) whose data is being collected. Irrecoverably delete personal data after the purpose for which it was collected has expired. Notify personal data breaches to the Data Protection Board and affected individuals.

22. Reporting Mechanisms

23. Additional Information https://infosecawareness.in/teacher https://isea.gov.in https://whatismyip.com www.cyberswachhtakendra.gov.in https://staysafeonline.in

24. “If its known, its MANAGEABLE. If its well-known, its ACTIONABLE.”