Posted By Contributor Featured on eSchool News,IT,Management,IT Newsletter

From constricted budgets to needing to protect large numbers of devices and users,

educational institutions face a unique set requirements for data protection and business


As a result, many school IT departments are struggling to create new data backup and

business continuity practices. However, all is not lost and there is no need to create these

from scratch, as leading education institutions are already leveraging enterprise-class

protection capabilities.

Here are six facts that experts in educational backup and continuity services already know:

Managing the true cost of digital dentistry and technology ownership in our practices

Challenge #1: Budget

There is perhaps no industry with more budget restraints than education. Most school districts

have few IT resources with little time that can be spent managing backups and recovering lost

files. If ever there was an industry that is required to do more with less, it is education.

Every moment spent managing and troubleshooting backup issues is time not available for IT’s

real job: working with the administration to improve student education. Carl Jaspersohn,

associate director of Infrastructure, Boston Architectural College [1] commented “We have a

small IT administrative staff with very little cross-training/overlap in responsibilities. Our

budget isn’t big compared to larger schools, but demands on IT are still high due to the nature

of the work done here.”

What the Experts Know – Educational institutions are now selecting backup and continuity

appliances and purpose-built devices, to replicate data locally to a remote location or to the

cloud. Appliances are easy to deploy and have a user interface dedicated to scheduling,

monitoring and managing backup files. The best backup appliances can also serve as a

recovery platform since the backup data files are already on the appliance. This provides

business continuity in case the original server or application is unavailable.

Challenge #2: Security Requirements

The protection requirements of educational institutions are different from other industries.

Education is unique in that there are large numbers of fairly unsophisticated users who are

prone to making mistakes. They are quick to click on dangerous links or delete and lose files

that they may need in the future. Bryan Young, network administrator, Rocky Hill, CN Public

Schools [2] stated “The school district consists of an enrollment of about 2,600 students with

more than 3,000 user accounts, 2,000 devices, and 50 servers as well as a network that spans

across six locations.”

In a 2016 study by CoSN, nearly 90 percent of education respondents expect their

instructional materials to be at least 50 percent digital within the next three years. The volume

of data is growing quickly, and the most requested data recovery service in educational

institutions is to restore files or folders that have been mistakenly deleted.

What the Experts Know – It should take you less than 5 minutes to log on, find the

requested file in the backup repository, and restore it to the user account. This is possible with

disk-based backups and the five-minute rule should apply whether you are restoring an

individual file, folder or entire data set. The User Interface (UI) of the appliance should be

easy enough for untrained staff to perform this task, as restores are far and away the most

requested data backup job required of IT staffers.

Challenge #3: Ransomware

Cryptolocker, Cerber, CryptoWall, Crysis, etc., are all variants of ransomware, a problem that

has reached epidemic levels. It is a billion-dollar criminal enterprise with up to 60 percent of

US enterprises reporting that they have been attacked. Education supports very large

numbers of users that easily fall for “click-bait”. Adolescents are heavy users of social media,

which is often a preferred vehicle for ransomware pirates. Most educational institutions have

already experienced a ransomware attack. In fact, Gary Halbedel, network administrator,

Bethlehem, NY Central School District [3] said “We’ve had two separate ransomware incidents

where users informed me that their files were encrypted with a message about paying a

ransom. It was trivial and quick for me to restore the data from the backup appliance.”

What the Experts Know – Data backups and the ability to roll the infrastructure back to its

state prior to the attack is the only real defense against ransomware. Even the FBI agrees [4].

Look for a solution that will automatically do security scans against your production applications, but use your backup data instead. It can spin up your applications in a specific order, isolate them from production, execute security tests, and automate reports and alerts immediately upon detection of ransomware. Most importantly, restoration of corrupted data sets should take just minutes.

Challenge #4: Older EdTech

As a result of tight budgets, older products and applications are kept functioning well beyond

their advertised useful life. Most education institutions have a broad and diverse number of

operating systems and applications that need protection. This creates the need for multiple

backup and recovery processes with each supporting a limited number of IT assets. Backup

and recovery becomes a complex process, as the IT staff must juggle multiple applications and

ensure that they can interoperate with no gaps in coverage. Michael Shellito, server

administrator, Enid, Oklahoma Public Schools [5] noted. “The district is VMware-centric, with

servers that include Windows 2003 to 2012R2, Linux, Red Hat, and SUSE. We have SQL,

Oracle and Exchange databases and servers that are each critical to our operations.”

What the Experts Know – Look for a solution that has broad coverage of hundreds of operating systems, hypervisors and applications, providing protection whether virtualized, physical or in the cloud. A single appliance should be able to protect everything in your datacenter, so there are not multiple backup tools with gaps in protection. Also, you should

not be charged for agents every time you install a new server or deploy an additional application. If you are spending more than 1 hour per week managing backups you need a new solution.

Challenge #5: Lots of Data

Most educational institutions must manage and protect TBs of data. Since much of it is about

minors, data elements such as student information, social security numbers, financial records,

and addresses need special protection. There are federally mandated requirements around

data retention and privacy outline bylaws such as Family Educational Rights and Privacy Act

Regulations (FERPA). Additionally, each state has individual laws that may be relevant such

as California’s Student Online Personal Information Protection Act (SOPIPA). Lastly, student

health records must comply with the Health Insurance Portability and Accountability Act of

1996 (HIPAA). Ross Randall, director of IT, Lamar County Schools, MS [6] said, “Few industries

match K12 education’s massive amounts of data and users accessing the data. When access to

that data fails, I fail.”

What the Experts Know – Backup appliances must include the ability to encrypt targeted

files so that they cannot be accessed illegally. They should support the latest encryption

technology, built-in AES 256-bit encryption to protect designated data files both at-rest and/or

in-flight. Cloud retention and disaster recovery must also use a HIPAA compliant and vendor

specific cloud, so educational institutions understand exactly who has access and management

responsibility so they can be held accountable for data security.

Challenge #6: Location

There is one advantage that the education industry has over others; the geographic dispersion

of their locations. Most small to medium enterprises conduct business out of a single location,

so finding a remote location for storing and securing secondary backups becomes a challenge.

Not so for the education industry, as school departments are generally spread across town to

serve students in all locations. This makes adding remote data protection easier and cost

effective. Randall [6] noted, “I have dual RECOVERY 814S appliances. One sits in the data

center as the primary and the other is secured in a school site about 30 miles north. The

secondary syncs with the primary to ensure a redundant backup solution.”

What the Experts Know – Schools take advantage of this geographic dispersal to create and

manage their own backup and recovery architecture. The secondary location should be able to

spin up failed servers and applications in seconds since backup copies of the data are already

resident there. You should also be able to manage both locations and multiple backup

appliances with a single interface “pane of glass” so there are no coordination issues with

multiple command centers.