Biden signs school cybersecurity act into law

The K-12 Cybersecurity Act directs CISA to study cybersecurity risks related to schools and develop recommendations as well as toolkits to help educators.

Cybersecurity experts hailed the K-12 Cybersecurity Act this week after US President Joe Biden signed it into law on October 8, officially kicking off efforts by CISA to examine the cybersecurity risks associated with K-12 educational institutions.

The law, which became one of the rare bills to pass in both the House and Senate, instructs CISA to examine the threats facing the nation's schools and then provide recommendations as well as toolkits to educators on cybersecurity hygiene.

There have been hundreds of cyberattacks against schools as cybercriminals seek out sensitive student and employee records over the last few years. The problem has gotten even worse since remote learning became the dominant mode of operation duringthe COVID-19 pandemic.

Schools now face a barrage of ransomware attacks alongside other incidents that leak critical data from students and administrators alike.

"This law highlights the significance of protecting the sensitive information maintained by schools across the country, and my Administration looks forward to providing important tools and guidance to help secure our school's information systems," Biden said while signing the law.

"The global pandemic has impacted an entire generation of students and educators and underscores the importance of safeguarding their sensitive information, as well as for all Americans. This law is an important step forward to meeting the continuing threat posed by criminals, malicious actors, and adversaries in cyberspace. My Administration is marshaling a whole-of-nation effort to confront cyber threats."