Cyber resilience in education

Hello everyone! It’s graduation season – a time for celebration and new beginnings as students (and parents!) mark the culmination of their hard work and look to the next chapter in their lives. It’s been great to see an increase in focus on cybersecurity education in recent years – from elementary school on up. Focusing on building cyber skills early and often is a great way to make the world a safer place. It’s also important to keep our education institutions and programs secure, which is why I’m excited to spotlight my colleague Corey Lee below, whose passions lie in securing education and protecting schools as they face these unique challenges.

Strengthening digital safety and cyber resilience has become increasingly important as educational institutions have emerged as prime targets for cybercriminals. Schools handle sensitive data — making them subject to malware, phishing, and IoT vulnerabilities. They also have open networks used by young students who may not have much experience in secure practices.

It's a balancing act. Schools want and need to utilize the amazing digital tools available today that help students grow and learn but also need to be vigilant against increasing cybersecurity risk.  

Educational institutions are adopting various security measures, including implementing multifactor authentication, training staff and students in cybersecurity and using advanced security tools like Microsoft Defender, Sentinel, and Entra. One great example is how Oregon State University and Auburn University increased their use of security tools and hired their own students to bolster their cybersecurity efforts.

After a cybersecurity incident in 2021, Oregon State University (OSU) enhanced its cybersecurity measures by creating a Security Operations Center (SOC). Microsoft solutions are central to these security efforts. OSU adopted a Zero Trust approach by deploying Microsoft Sentinel and Microsoft Defender, significantly improving its ability to detect and respond to threats in real-time. It now detects incidents in minutes instead of weeks and has reduced its daily open incident count.

OSU’s SOC also uses the power of generative AI for security by using Microsoft Security Copilot to enhance automation and operational efficiency, helping security analysts focus on high-priority incidents. The integration of these advanced security tools not only protects OSU's research and data but also provides students with hands-on experience in modern cybersecurity practices.

Universities must integrate cybersecurity into the fabric of their culture. From creating a cybersecurity curriculum for students, to developing a guide for teachers, and making sure educational tools are safe to use, schools can become secure by design.

I’m very proud and grateful to see how educational institutions like OSU are leading the way on cybersecurity and looking forward to partnering with schools and universities across the globe to protect these institutions which are at the cornerstone of our society.

The imperative for cybersecurity in the field of education is twofold: to ensure that education systems remain secure and to educate the next generation of cybersecurity defenders. I’m excited to spotlight Microsoft Education Security CTO Corey Lee, whose focus is to strengthen digital safety and cyber resilience in education, research, and across the public sector.

Corey says he has always had a passion for analyzing problems and solving crimes, “largely due to my love for Inspector Gadget as a child.” However, his introduction to cybersecurity wasn’t until college when an academic advisor introduced him to the field. The rest is history. “After taking an intro course, I knew this field would allow me to use my biggest skill at the time: ‘asking why,’ while helping to fight bad guys.”

So how can schools create opportunities to expose students early on to the practice and field of cybersecurity? Corey says the best way is to “get hands-on, often and early.” This might include hosting cybersecurity games, creating cyber competition teams, or encouraging students to become cyber volunteers. “A great option for students is to pursue opportunities to join a student security operations center to gain real-world, hands-on experience helping to protect the school you attend or the community you live in.” For example, students in Polk county were offered valuable opportunities to work in local government or support local small businesses – experience they can take with them into their careers. He also says that students who are considering a career in cybersecurity should explore the application of cybersecurity principles within their areas of passion such as gaming, coding, and engineering.

One of the most exciting advancements in the era of AI for engaging students early in their education is the introduction of AI-powered learning platforms like intelligent cybersecurity labs and games. These provide a captivating way for students to develop cyber skills and foster an interest in the field of cybersecurity. Corey expects to see far more students in K–12 and beyond getting involved in cyber because of early engagement efforts, which will in turn enable our industry to better attract and develop the next generation of security professionals. Corey says, “This influx of new talent, empowered by AI-driven knowledge, will improve the capacity of the cyber workforce and help cover the growing need for security professionals. In turn, as more qualified individuals join the field, communities benefit – these professionals give back by keeping their communities safe from digital harm.”

I feel optimistic about the future of cybersecurity in the era of AI. By embracing tools powered by AI and encouraging more young people to develop cybersecurity skills as part of their educational journey, we are strengthening our ability to protect schools, businesses, and communities in the digital age. It’s an exciting time to begin a career in cybersecurity, whether you’re a recent graduate or you’re more established and looking for a new and fulfilling career path in which you can make a meaningful difference. I am so inspired by the new talent I meet in our field, and I have every confidence in the coming generation of defenders to reshape what’s possible in security and make our world a safer place.

·       I am thrilled about Microsoft’s new European Security Program to offer free cyber support to EU governments. Security is a team sport, and I’m looking forward to the ways this program will benefit us all.

·       Corporate Vice President and Deputy Chief Information Security Officer (CISO) for AI, Yonatan Zunger, recently shared a blog that has some wonderful insights about how to build a plan to deploy AI safely.

·       Microsoft Purview produced a whitepaper about the top challenges in securing and governing data in the era of AI. Organizations need a unified approach to secure and govern data – you can read the full research paper here.

·       IDC recently published a report on Microsoft’s Secure Future Initiative and our commitment to improve the security posture of Microsoft, our customers, and the industry at large. It’s great to see this validation of our efforts for this ongoing program.

Something that recently inspired me… is the book “Life as a Day Maker” by David Wagner. In this book Wagner encourages readers to live with purpose by making it their mission to uplift others. His message is simple but profound: by choosing to be a Day Maker (make someone’s day!), you can create a ripple effect of positivity that changes lives—and the world.

A quote I love: "Do not wait for the stars to align. Reach up, rearrange them the way you want. Create your own constellation.” — Pharrell Williams