2014-06-24 iAdmin Smart [NASDTEC]

iAdminSmartDeveloping Effective Policy and Forensic Procedures for School Districts and Schools

Frederick S. Lane

NASDTEC Webinar24 June 2014

Background and Expertise• Attorney and Author of

7 Books• Impact of Technology

on Law, Society & Privacy

• Computer Forensics Expert -- 15 years

• Numerous Lectures to School Districts, Administrators, Teachers, PTOs & PTAs, and Students

• 10 yrs on Burlington VT School Board

Lecture Overview• Typical Investigations• Internal Digital Investigations• External Digital Investigations• A Quick Intro to Computer

Forensics• Developing Effective Policies

and Procedures• The Importance of Education

Typical Investigations

• Lack of Productivity•Hostile Emails, Texts, etc.• Indecent / Obscene Web Sites• Cyberbullying / Cyberharrassment• Sexting / Sextortion• Inappropriate Teacher / Student Communications• Voyeurism / Solicitation / Sexual Assault

Internal Digital Investigations

• Typical Triggering Events:• Student / Parent Complaint• Report by Teacher• Flagged by IT Department• Disruption of Educational Environment

• Best Reserved for Non-Criminal Incidents• Early Involvement of Parents / Guardians• Follow Established Procedures• Be Aware of Privacy Concerns• Consider Potential for Civil Litigation

External Digital Investigations

• Typical Triggering Events:• Student / Parent Complaint• Report by Teacher or IT Department• Disruption of Educational Environment• Independent Law Enforcement Investigation

• Involve SRO / Police as Soon as Possible• Critical to Follow Established Procedures• Remember Watergate (No Cover-ups,

Preserve Evidence)• Still a Potential for Civil Litigation

Intro to Computer Forensics

• The Delete Key Is a Myth•Multiple Sources of Electronic Data• Fourth Amendment Considerations•Warrants, Field Previews, and Seizure•Mirror Imaging• Forensic Software Suites and Special Tools•Don’t Confuse IT with Computer Forensics

Policies & Procedures

• Overall Policy Goals:• Holistic: They Apply to Everyone in District• Proactive: Adopted Before Problems Arise• Tech-Positive: Not Just “Thou Shalt Not”

• Involve Community in Drafting Policies• Issues to Consider:• Standards of Behavior / Acceptable Uses• Handling of Electronic Evidence• Disciplinary Proceedings and Punishment

• Keep Policies and Procedures Updated!

Ongoing Education• The Best Investigation Is the One That Doesn’t Take Place• Annual Professional Development for Educators• Incorporate Policy Goals into Curricula• Age-Appropriate Language for Students•Don’t Forget to Educate School Board Members and Parents

Three Webinars for Districts

• iParentSmart• Based on Cybertraps for the Young (2011)

• Education and Solutions for Parents

• iTeachSmart• Based on Cybertraps for Educators (June 2014)

• Professional Development for Educators

• iAdminSmart• Overview of Law, Forensic Procedure, and Best

Practices for School Districts

• Prevention and Incident Response

Contact Information

• E-Mail:• [email protected]

• Telephone:• 802-318-4604

• Twitter• @Cybertraps, @FSL3

• LinkedIn:• www.linkedin.com/in/fredericklane/

• SlideShare.net• www.slideshare.net/FSL3

Cybertraps.wordpress.com

iAdminSmartDeveloping Effective Policy and Forensic Procedures for School Districts and Schools

Frederick S. Lane

NASDTEC Webinar24 June 2014