PowerSchool (NYSE: PWSC), the leading provider of cloud-based software for K-12 education in North America, today announced it is joining the K-12 Education Technology Secure by Design Pledge, a voluntary pledge for K-12 education technology software manufacturers, developed by the Cybersecurity and Infrastructure Security Agency (CISA) and the U.S. Department of Education. PowerSchool also announced new commitments to further secure the education technology ecosystem by offering free and subsidized security-as-a-service resources to all U.S. schools and districts.
“Our primary mission is to personalize education for every student and that journey starts with our responsibility to protect and safeguard the over 45 million students we serve today in the U.S.,” said Hardeep Gulati, CEO of PowerSchool. “That is why we have made significant investments in cybersecurity and successfully defend our districts against over 1 billion cyber-attacks each year. We are honored to sign this pledge and even provide additional free and subsidized security-as-a-service trainings, tools, and resources to support and enable all U.S. school districts to fight against cybersecurity threats.”
As part of First Lady Jill Biden’s Back to School Safely: Cybersecurity Summit for K-12 Schools event on August 7th, 2023, PowerSchool CEO Hardeep Gulati will highlight PowerSchool’s cybersecurity leadership and initiatives including cloud infrastructure security, cyber defense, and governance risk and compliance, that secure over 80% of the school districts across all U.S. states, including 90 of the top 100 districts by student population.
“Let’s face it: in today’s digital age, our students and their teachers will increasingly use technology in the classroom. Schools have access to more devices and connectivity than ever before, and this technology in education has incredible potential to help students better connect with their learning and achieve, and teachers better engage with their students,” said U.S. Secretary of Education Miguel Cardona. “But to make the most of these benefits, we must effectively manage the risks. Just as we expect everyone in a school system to plan and prepare for physical risks, we must now also ensure everyone helps plan and prepare for digital risks in our schools and classrooms. The Department of Education has listened to the field about the importance of K-12 cybersecurity, and today we are coming together to recognize this and indicate our next steps.”
PowerSchool already adheres to several commitments outlined in the pledge, including offering single sign-on for free to customers, providing audit logs to any customer upon request, maintaining a published vulnerability disclosure policy administered by an independent third party, and embracing vulnerability transparency by openly engaging with customers on vulnerabilities, threats, and risks the company identifies.
PowerSchool is also taking additional steps to provide industry-leading cybersecurity support to educational institutions. This includes offering free and subsidized security-as-a-service resources, including on-demand webinars, toolkits, and trainings to U.S. schools and districts, as well as offerings from partners including Abnormal Security, Amazon Web Services, and KnowBe4. These resources will be available to any U.S. school or district, regardless of their customer status.
“Keeping our students and our schools safe from cyberattacks comes down to equipping schools with three things – knowledge, resources, and people,” said Anne Neuberger, Deputy National Security Advisor for Cyber and Emerging Technologies. “This week, the White House worked to do just that – mobilizing funding, cybersecurity fact guides tailored for schools, and cybersecurity teams to visit schools and help them fight ransomware. We appreciate the innovative and meaningful private sector commitments in this ransomware fight, as we work together to keep kids cyber-safe online and in schools.”
PowerSchool’s significant investment in advanced security technologies, including static and dynamic code scanning, best-of-breed Web Application Firewalls, and more than 30 annual penetration tests, reinforces its unwavering commitment to providing unparalleled protection and trust to districts and schools. As a signatory of the Student Privacy Pledge 2020, PowerSchool adheres to all applicable state, province, and federal regulations and goes beyond those by independently verifying its security management system annually to third-party audited, internationally recognized standards for security management systems, achieving the ISO:27001 certification and SOC2 Type 2 – the gold standard data security certification for business service providers. PowerSchool is also partnered with the Consortium for School Networking (COSN) on their recently rolled-out K-12 Community Vendor Assessment Tool (K-12CVAT) and is an active partner of 1EdTech, focusing on industry standards, interoperability, and data privacy and security best practices. PowerSchool products have been vetted and certified as TrustEd Apps by 1Edtech, based on the organization’s rigorous data and privacy rubric.
For more information on PowerSchool’s security, visit https://www.powerschool.com/security/.
