<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>Practical Issues in InfoSec &#187; K-12 Education</title>
	<atom:link href="http://www.dlstrom.com/category/k-12-education/feed/" rel="self" type="application/rss+xml" />
	<link>http://www.dlstrom.com</link>
	<description>... putting information security within reach of everyone!</description>
	<lastBuildDate>Tue, 20 Dec 2011 17:00:00 +0000</lastBuildDate>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.3.1</generator>
		<item>
		<title>Privacy and Dept. of Education</title>
		<link>http://www.dlstrom.com/2011/04/12/privacy-and-dept-of-education/</link>
		<comments>http://www.dlstrom.com/2011/04/12/privacy-and-dept-of-education/#comments</comments>
		<pubDate>Tue, 12 Apr 2011 13:45:15 +0000</pubDate>
		<dc:creator>Dan Strom</dc:creator>
				<category><![CDATA[K-12 Education]]></category>
		<category><![CDATA[Privacy]]></category>

		<guid isPermaLink="false">http://www.dlstrom.com/?p=372</guid>
		<description><![CDATA[The U.S. Department of Education has hired a Chief Privacy Officer. Take a look at the press release here. This seems like a great thing. Here is what the new CPO will be doing&#8230; She will head a new division dedicated to advancing the responsible stewardship, collection, use, maintenance and disclosure of information at the [...]]]></description>
			<content:encoded><![CDATA[<p></p><div class="socialize-in-content" style="float:right;"><div class="socialize-in-button socialize-in-button-right"><a href="http://twitter.com/share" class="twitter-share-button" data-url="http://www.dlstrom.com/2011/04/12/privacy-and-dept-of-education/" data-text="Privacy and Dept. of Education" data-count="none" data-via="danstrom" data-related="danstrom"><!--Tweetter--></a></div><div class="socialize-in-button socialize-in-button-right"><iframe src="http://www.facebook.com/plugins/like.php?href=http://www.dlstrom.com/2011/04/12/privacy-and-dept-of-education/&amp;layout=standard&amp;show_faces=false&amp;width=50&amp;action=like&amp;font=arial&amp;colorscheme=light&amp;height=65" scrolling="no" frameborder="0" style="border:none; overflow:hidden; width:50px !important; height:65px;" allowTransparency="true"></iframe></div></div><p>The U.S. Department of Education has hired a Chief Privacy Officer. Take a look at the press release <a href="http://www.ed.gov/news/press-releases/us-education-department-launches-initiatives-safeguard-student-privacy">here</a>.</p>
<p>This seems like a great thing. Here is what the new CPO will be doing&#8230;</p>
<blockquote>
<p>She will head a new division dedicated to advancing the responsible stewardship, collection, use, maintenance and disclosure of information at the national level within the Education Department.</p>
</blockquote>
<p>Schools keep a great deal of information about their students. They keep names and addresses. Medical information is also kept. It is important to protect and responsibly disclose this info.</p>
<p>Now that there is a renewed emphasis at the national level, when can we expect the states to follow? How about the individual school districts?</p>
<p>I am eager to see how this impacts things at the state level and local schools. You can bet many will be watching.</p>
<p>- Dan</p>
]]></content:encoded>
			<wfw:commentRss>http://www.dlstrom.com/2011/04/12/privacy-and-dept-of-education/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Youth Safety on a Living Internet</title>
		<link>http://www.dlstrom.com/2010/06/28/youth-safety-on-a-living-internet/</link>
		<comments>http://www.dlstrom.com/2010/06/28/youth-safety-on-a-living-internet/#comments</comments>
		<pubDate>Mon, 28 Jun 2010 14:05:47 +0000</pubDate>
		<dc:creator>Dan Strom</dc:creator>
				<category><![CDATA[Government]]></category>
		<category><![CDATA[K-12 Education]]></category>
		<category><![CDATA[NTIA]]></category>
		<category><![CDATA[OSTWG]]></category>

		<guid isPermaLink="false">http://www.dlstrom.com/?p=324</guid>
		<description><![CDATA[Earlier in the month, the Online Safety and Technology Working Group within the NTIA submitted their report entitled Youth Safety on a Living Internet, along with their recommendations to the Dept of Commerce and members of the House and Senate. Here is a summary of the objectives of the report which is take directly from [...]]]></description>
			<content:encoded><![CDATA[<p></p><div class="socialize-in-content" style="float:right;"><div class="socialize-in-button socialize-in-button-right"><a href="http://twitter.com/share" class="twitter-share-button" data-url="http://www.dlstrom.com/2010/06/28/youth-safety-on-a-living-internet/" data-text="Youth Safety on a Living Internet" data-count="none" data-via="danstrom" data-related="danstrom"><!--Tweetter--></a></div><div class="socialize-in-button socialize-in-button-right"><iframe src="http://www.facebook.com/plugins/like.php?href=http://www.dlstrom.com/2010/06/28/youth-safety-on-a-living-internet/&amp;layout=standard&amp;show_faces=false&amp;width=50&amp;action=like&amp;font=arial&amp;colorscheme=light&amp;height=65" scrolling="no" frameborder="0" style="border:none; overflow:hidden; width:50px !important; height:65px;" allowTransparency="true"></iframe></div></div><p>Earlier in the month, the <a href="http://www.ntia.doc.gov/advisory/onlinesafety/">Online Safety and Technology Working Group</a> within the NTIA submitted their report entitled <a href="http://www.ntia.doc.gov/reports/2010/OSTWG_Final_Report_060410.pdf">Youth Safety on a Living Internet</a>, along with their recommendations to the Dept of Commerce and members of the House and Senate.</p>
<p>Here is a summary of the objectives of the report which is take directly from the introductory comments&#8230;</p>
<blockquote>
<p style="margin: 0.0px 0.0px 0.0px 0.0px; font: 12.0px Helvetica; color: #1a1a18;">On behalf of the Online Safety and Technology Working Group (OSTWG), we are pleased to transmit this report to you. As mandated, we reviewed and evaluated:</p>
<p style="margin: 0.0px 0.0px 0.0px 0.0px; font: 12.0px Helvetica; color: #1a1a18;"> </p>
<p style="margin: 0.0px 0.0px 0.0px 0.0px; font: 12.0px Helvetica; color: #1a1a18;">1.<span style="white-space: pre;"> </span>The status of industry efforts to promote online safety through educational efforts, parental control technology, blocking and filtering software, age-appropriate labels for content or other technologies or initiatives designed to promote a safe online environment for children;</p>
<p style="margin: 0.0px 0.0px 0.0px 0.0px; font: 12.0px Helvetica; color: #1a1a18;"> </p>
<p style="margin: 0.0px 0.0px 0.0px 0.0px; font: 12.0px Helvetica; color: #1a1a18;">2.<span style="white-space: pre;"> </span>The status of industry efforts to promote online safety among providers of electronic communications services and remote computing services by reporting apparent child pornography, including any obstacles to such reporting;</p>
<p style="margin: 0.0px 0.0px 0.0px 0.0px; font: 12.0px Helvetica; color: #1a1a18;"> </p>
<p style="margin: 0.0px 0.0px 0.0px 0.0px; font: 12.0px Helvetica; color: #1a1a18;">3.<span style="white-space: pre;"> </span>The practices of electronic communications service providers and remote computing service providers related to record retention in connection with crimes against children; and</p>
<p style="margin: 0.0px 0.0px 0.0px 0.0px; font: 12.0px Helvetica; color: #1a1a18;"> </p>
<p style="margin: 0.0px 0.0px 0.0px 0.0px; font: 12.0px Helvetica; color: #1a1a18;">4.<span style="white-space: pre;"> </span>The development of technologies to help parents shield their children from inappropriate material on the Internet.</p>
<p style="margin: 0.0px 0.0px 0.0px 0.0px; font: 12.0px Helvetica; color: #1a1a18;"> </p>
<p style="margin: 0.0px 0.0px 0.0px 0.0px; font: 12.0px Helvetica; color: #1a1a18;">The report contains recommendations in each of the above categories, as well some general recommendations. We believe these recommendations will further advance our collective goal to provide a safer online experience to our children.﻿</p>
</blockquote>
<p style="margin: 0.0px 0.0px 0.0px 0.0px; font: 12.0px Helvetica; color: #1a1a18;"><span style="color: #000000;"><span style="font-size: medium;"><span style="color: #1a1a18;"><br /></span></span></span></p>
<p>This is an important document. If you have children, know children or are involved with kids at church or school you should take the time to read this report.</p>
<p>- Dan</p>
<p> </p>
]]></content:encoded>
			<wfw:commentRss>http://www.dlstrom.com/2010/06/28/youth-safety-on-a-living-internet/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>InfoSec Tip: Turn off auto-login</title>
		<link>http://www.dlstrom.com/2009/05/11/infosec-tip-turn-off-auto-login/</link>
		<comments>http://www.dlstrom.com/2009/05/11/infosec-tip-turn-off-auto-login/#comments</comments>
		<pubDate>Mon, 11 May 2009 15:04:12 +0000</pubDate>
		<dc:creator>Dan Strom</dc:creator>
				<category><![CDATA[General]]></category>
		<category><![CDATA[Home InfoSec]]></category>
		<category><![CDATA[K-12 Education]]></category>
		<category><![CDATA[OS X]]></category>
		<category><![CDATA[Tips]]></category>
		<category><![CDATA[Windows]]></category>

		<guid isPermaLink="false">http://www.dlstrom.com/?p=219</guid>
		<description><![CDATA[It&#8217;s convenient to just turn on your computer, go get a cup of coffee and have the desktop waiting for you when you come back. Right? But do you realize that you are putting your sensitive data at risk when you do that? What if you lose your computer? One barrier to the Bad Guys [...]]]></description>
			<content:encoded><![CDATA[<p></p><div class="socialize-in-content" style="float:right;"><div class="socialize-in-button socialize-in-button-right"><a href="http://twitter.com/share" class="twitter-share-button" data-url="http://www.dlstrom.com/2009/05/11/infosec-tip-turn-off-auto-login/" data-text="InfoSec Tip: Turn off auto-login" data-count="none" data-via="danstrom" data-related="danstrom"><!--Tweetter--></a></div><div class="socialize-in-button socialize-in-button-right"><iframe src="http://www.facebook.com/plugins/like.php?href=http://www.dlstrom.com/2009/05/11/infosec-tip-turn-off-auto-login/&amp;layout=standard&amp;show_faces=false&amp;width=50&amp;action=like&amp;font=arial&amp;colorscheme=light&amp;height=65" scrolling="no" frameborder="0" style="border:none; overflow:hidden; width:50px !important; height:65px;" allowTransparency="true"></iframe></div></div><p>It&#8217;s convenient to just turn on your computer, go get a cup of coffee and have the desktop waiting for you when you come back. Right?</p>
<p>But do you realize that you are putting your sensitive data at risk when you do that?</p>
<p>What if you lose your computer? One barrier to the Bad Guys accessing your files is removed. I can think of countless scenarios similar to this.</p>
<p>If you are running <strong>Mac OS X</strong>, here are the steps to turn off automatic login&#8230;</p>
<ol>
<li>
Open System Preferences and then open the Security pane.
</li>
<p><img src="http://www.dlstrom.com/wp/wp-content/uploads/2009/05/osx-securityprefpane.jpg" alt="OSX_SecurityPrefPane.jpg" border="0" width="469" height="84" align="center" /></p>
<li>Put a check mark beside &#8220;Require password to wake this computer from sleep or screen saver&#8221;, and also put a check mark beside &#8220;Disable automatic login&#8221; for all accounts on this computer.</li>
</ol>
<p>What about <strong>Windows XP</strong> or <strong>Vista</strong>? First off, you need Local Administrator rights to make this change. Second, if you are joined to a Domain, then by default your auto-login is turned off and this is managed by the Domain Administrator.</p>
<p>Here are the steps to turn off automatic login in a Windows XP and Vista environment&#8230;</p>
<ol>
<li>
Go to Start&#8230; Run&#8230; and then type <strong>control userpasswords2</strong> in the Run&#8230; box and hit enter.</li>
<p><img src="http://www.dlstrom.com/wp/wp-content/uploads/2009/05/winxp-autologin.jpg" alt="WinXP_AutoLogin.jpg" border="0" width="391" height="106" align="center" /></p>
<li>
Put a check mark in the box beside Users must enter a user name and password to use this computer. Click Apply, then OK.</li>
</ol>
<p>That&#8217;s all there is to it! Pretty simple, and greatly increases the security of your files in the event you lose your computer, or someone without permission turns your computer on.</p>
<p>- Dan</p>
]]></content:encoded>
			<wfw:commentRss>http://www.dlstrom.com/2009/05/11/infosec-tip-turn-off-auto-login/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Know Thy Vendors</title>
		<link>http://www.dlstrom.com/2008/05/02/know-thy-vendors/</link>
		<comments>http://www.dlstrom.com/2008/05/02/know-thy-vendors/#comments</comments>
		<pubDate>Fri, 02 May 2008 22:06:34 +0000</pubDate>
		<dc:creator>Dan Strom</dc:creator>
				<category><![CDATA[Government]]></category>
		<category><![CDATA[K-12 Education]]></category>
		<category><![CDATA[Vendor Management]]></category>

		<guid isPermaLink="false">http://dlstrom.com/wp/?p=21</guid>
		<description><![CDATA[Computerworld reported last week that more people have been indicted on E-Rate fraud charges. Basically they have been accused of stealing money that was intended to help schools and libraries with technology for education. It is important that you know your vendors. Many vendors will approach schools with proposals for solutions they say qualify for [...]]]></description>
			<content:encoded><![CDATA[<p></p><div class="socialize-in-content" style="float:right;"><div class="socialize-in-button socialize-in-button-right"><a href="http://twitter.com/share" class="twitter-share-button" data-url="http://www.dlstrom.com/2008/05/02/know-thy-vendors/" data-text="Know Thy Vendors" data-count="none" data-via="danstrom" data-related="danstrom"><!--Tweetter--></a></div><div class="socialize-in-button socialize-in-button-right"><iframe src="http://www.facebook.com/plugins/like.php?href=http://www.dlstrom.com/2008/05/02/know-thy-vendors/&amp;layout=standard&amp;show_faces=false&amp;width=50&amp;action=like&amp;font=arial&amp;colorscheme=light&amp;height=65" scrolling="no" frameborder="0" style="border:none; overflow:hidden; width:50px !important; height:65px;" allowTransparency="true"></iframe></div></div><p><a href="http://www.computerworld.com/action/article.do?command=viewArticleBasic&#038;articleId=9080659&#038;source=NLT_AM&#038;nlid=1"><b>Computerworld</b></a> reported last week that more people have been indicted on <a href="http://www.fcc.gov/learnnet/welcome.html"><b>E-Rate</b></a> fraud charges. Basically they have been accused of stealing money that was intended to help schools and libraries with technology for education.</p>
<p>It is important that you know your vendors. Many vendors will approach schools with proposals for solutions they say qualify for E-Rate funding. Sometimes the school or library will create an RFP (Request for Proposal) and send to potential vendors. While the technology may qualify, not all vendors are created equal. How are we to know which vendors are reputable?</p>
<ul>
<li><strong>References</strong> &#8211; Ask for at least four companies or schools that this vendor has done work for. Contact these organizations and get their opinions on the quality, timliness and cost of the work. Find out about any negative interactions with the company. This would be very similar to checking references for a possible new employee.</li>
<li><strong>Research</strong> &#8211; Do your own research into the vendor. How long have they been in business? How big is the company? You are seeking information that will give you an idea of the stability and longevity of the company. You want to make sure that this vendor will be around in case there are issues following the project implementation.</li>
<li><strong>Warranty or money back guarantee</strong> &#8211; We all want a project to be done on time and within budget. We also expect the solution to work as presented. But, sometimes these things don&#8217;t happen. Does this vendor offer any warranty on their work or a money back guarantee in the event of a complete failure to deliver?</li>
<li><strong>Capability</strong> &#8211; This seems obvious, but does this company have the expertise and capability to deliver on what they are selling?</li>
<li><strong>Design</strong> &#8211; If an RFP has been developed and sent out, you should closely review the proposals that are returned by the vendors. Make sure that their solutions really fit the requirements and that extraneous items are not included. You can be assured that if they are trying to get unneeded items or work into their proposal then they are not a company you want to enter into a relationship with. You want to be able to trust your vendors.</li>
</ul>
<p>The vast majority of vendors are reputable. Only a few are guilty of fraudulent behavior. Do you homework and you will be able to avoid the ones working to rip you off.</p>
<p>- Dan</p>
]]></content:encoded>
			<wfw:commentRss>http://www.dlstrom.com/2008/05/02/know-thy-vendors/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
	</channel>
</rss>

