In December 2022, the FCC opened a call for comment requesting stakeholders provide input on whether E-Rate program funds can be used to support advanced or next-generation firewalls and services, as well as other network security services.
For those unfamiliar with the program, E-Rate is a Federal Communications Commission (FCC) program that provides funding to schools and libraries for telecommunications and internet services. Eligible schools and libraries can receive discounts on their connectivity services, depending on their level of income and location.
Currently, the vast majority of cybersecurity tools and services are exempt from E-Rate funding. However, by opening a call for comment, the FCC has signaled that they are considering making cybersecurity solutions eligible for the E-Rate program so that schools and libraries can better protect their networks, devices, and students from cyber threats.
Data from the K12 Security Information Exchange (“K12 SIX”) shows that the nation’s public schools collectively average at least one cyber incident each school day, and while this number is itself alarming, they also estimate that “perhaps 10 to 20 times more K-12 cyber incidents go undisclosed every year”.
With stats like these, it’s clear that cybersecurity is an imperative for the K-12 industry not only because their sensitive employee and student data that may be targeted by malicious actors, but more importantly cybersecurity is a fundamental requirement to ensuring connectivity for students.
Unfortunately, many educational institutions face significant challenges in addressing the modern threat landscape for a number of reasons, which include:
- Limited resources: Educational institutions have limited budgets and staff, making it difficult to devote sufficient resources to implementing a comprehensive cybersecurity program
- Outdated technology: School and libraries often rely on technology and software that is no longer supported by the manufacturer, meaning they do not receive updates or patches to address known security vulnerabilities.
- Lack of cybersecurity awareness: Many school and library staff members, students, and patrons are unaware of cybersecurity risks and how to protect themselves, making them targets for cyber attacks.
- A fragmented approach: K-12 institutions often rely on a mix of security tools without a unified structure. This can make it difficult to coordinate and manage their overall security posture.
We believe that implementing an effective cybersecurity operations program is essential to keeping children learning in the classroom. This deep belief is why we have drafted a comprehensive response to the FCC that advocates for E-Rate funding support being made available for not only next-generation firewalls, but also cybersecurity solutions and services that span the entire cybersecurity operations framework.
Advanced cybersecurity technologies and services, such as those offered by Arctic Wolf, can cost-effectively address many of the cybersecurity challenges schools and libraries face today. For example, using a managed cybersecurity service is very often more economical for an institution than staffing its own security team. Moreover, smart spending on preventive measures upfront can avoid the costly consequences of dealing with the aftermath of a cyberattack or data breach later.
Using next-generation solutions can also improve cyber threat detection. Schools and libraries need assistance deciphering threat alerts to better understand where the real risks lie. The historical tools-based approach to cybersecurity can result in IT teams being overwhelmed with alerts. For example, Forrester reports a security operations center receives over 11,000 alerts per day. Arctic Wolf provides tools for schools and libraries to centralize and unify this data, enabling users to turn a flood of information into valuable security insights.
Arctic Wolf is fortunate to have the opportunity to work alongside our partner community to help protect hundreds of educational institutions and thousands of students across the United States. With classroom learning evolving beyond a pen and a pencil to now include laptops, video conferencing, cloud services, and myriad of other connected solutions, we hope that the FCC will continue to evolve the E-Rate program to include cybersecurity solutions needed to help protect all who use them.
