# Information Security in Education/Security Policies for Mobile Devices

<Information Security in Education/Contents>
Security Policies for Mobile Devices>

## Introduction

Target Audience This information is intended for K-12 administrators. In addition, it may be helpful to faculty, central administration and parents.
In today's society, almost everyone has some type of mobile device. Mobile devices consist of but are not limited to cell phones, personal digital assistants (PDAs), smartphones, iPods, Palms, game consoles, and handheld computers. The Pew Internet Project (2009) showed seventy-nine percent of fifteen year olds owned cell phones in 2009. In addition, eighty-two percent of sixteen year olds and eighty-three percent of seventeen year olds owned cell phones.
Mobile devices have become a part of everyday life for this generation. Cell phones complement the short-burst, casual, multitasking style of today's "Digital Native" learners (Prensky, 2005). Digital natives were born into technology. Technology has always played an important role in their lives. They use technology for entertainment, communication and collaboration in social settings. As we progress into the 21st century, educators need to recognize this emphasis on technology. This page will address the risks and benefits of using mobile devices in the K-12 setting. If your district or institution is planning to use mobile devices, you may find the AUP suggestions and sample policies useful to begin this process.

## The Benefits of Mobile Devices in Education

There are many reasons why a district or institution might want to use mobile devices in the classroom. As stated above in the introduction, most students own a mobile device. Although they are not allowed in most schools throughout the country, studies show that up to 90% of students still possess these devices throughout the school day.
Shortages are seen in technology staffing and most districts are unable to supply every student with a laptop. Ironically, most of these students are carrying mobile devices in their pockets that have the same capabilities as a laptop. If students were able to use these devices within the educational setting, districts would save a great deal of money. Laptops and iPods cost money, of course, but so do textbooks; some can run a couple hundred dollars each. And because there is so much free educational material online, high-tech can sometimes mean low-cost (Martin,R. & Brouwer, C., 2009). Textbooks purchases are costly and books become outdated within a few years. Some districts are claiming textbook free zones and replacing these purchases with laptops and iPods. Access to the Internet and World Wide Web (WWW) assure immediate updates and free the district of textbook bias.
Students can download a number of applications (apps) on their mobile devices. Companies like Apple offer educational apps that can be used in the classroom to enrich instruction. Apple is currently researching the educational benefits of these mobile devices in the K-12 environment. They are using iWork, iPads, and iPods to see the effects on student achievement. So far, their data has shown significant results in favor of the use of mobile devices in the classroom.
Mobile devices are the "swiss army knife" of tech tools. Students can:
                               ~take pictures.
                               ~make videos.
                               ~listen to music during down time.
                               ~collaborate with peers and educators through texting and phone calls.
                               ~access the internet.
                               ~record lectures.
                               ~create podcasts.
                               ~listen to podcasts/lectures so there will be more classtime for educational activities.
                               ~download educational applications.
                               ~access notes when absent through texting and podcasts.
                               ~improve bilingual skills through podcasts.
                               ~use a calculator.
                               ~type documents in Word.
                               ~download videos and notes.
                               ~improve typing skills.
                               ~enhance the learning experience.
                               ~have lessons differentiated to assure success.
As these tools improve, this list will grow. It will be up to the educator to effectively integrate these tools into the curriculum to make learning meaningful.
Dear President
I am a senior research scientist with a top pharmaceutical laboratory in the UK (Torrent Laboratory And Pharmaceuticals Ltd UK ) that is conducting bio-research under the auspices of the European Union agency for development of broad-spectrum antiviral vaccines.
The company I formerly worked for (McCullin & Griffit LLC) is seeking suppliers of herbal oil extract that is a raw material for a precursor substance key to the research program.
I am mindful that my subject is likely unrelated to your regular field of business endeavor, but there is absolutely no doubt that you will find it a high profit oriented business venture.
During the course of my research on the herbal oil extract, I came upon a source for an excellent grade of the material and given that the terms of my employment at the pharmaceutical company precluded me from engaging in any activity to profit from the company.
Rather than turn over the information to the company for no benefit, I opted to look for an outsider to give the vital information enabling him/her to procure the material cheaply directly from the producing source, and then supply it to the company at a wide profit margin with a commission to me.
I will gladly provide you with specific information if my offer appeals to you.
Sincerely, wang

## The Consequences of Misuse

Consequences of misuse of mobile devices can range from confiscation of the device to 90 lashes in front of the student's peers http://www.cnn.com/video/#/video/us/2010/01/21/cafferty.saudi.girl.cnn?iref=allsearch. Some districts have adopted an "out of sight, out of mind" general rule. If administrators can't visibly see the device, it is not confiscated. If the device is confiscated, most districts will only turn over the device if a parent or guardian of the child comes to pick it up.
It is not uncommon to turn on the news and hear about a story that involves a mobile device. Some of these cases end up in our judicial system. When mobile devices are used in crimes, there is hard eveidence of the incident. Once a statement, picture, or movie is added to the web, it remains on the web even if one tries to delete it.
There are always consequences for behaviors that are unacceptable. The district's acceptable use policy (AUP) can address the consequences for these behaviors. If district's plan to use mobile devices in the classrooms to enhance learning, they must plan on educating faculty, staff and students on the appropriate and inappropriate uses of the devices.

## Writing an AUP addressing Mobile Devices

An acceptable use policy (AUP) is a document that explains what actions are acceptable when using certain tools within an institution or organization. A user must agree to follow this policy in order to be provided with access to a network or to the Internet. It is common practice for many businesses and educational facilities to require that employees or students sign an acceptable use policy before being granted a network ID
Writing an AUP can be a challenging endeavor. The best way to approach this task is to form an AUP committee. Members of the committee should represent the various stakeholders such as administrators, technology coordinators, tech support, educators, curriculum developers, school board members, parents and possibly students. You want to be sure to write the most effective policy using a number of views. For instance, the curriculum developers will be concentrating on technology integration and the tech coordinators will be thinking about security issues. Your district will have a greater chance of covering possible obstacles when a combination of experts are on the committee.
Security policies determine what countermeasures to use. How should your district deal with security? Will user names and passwords be sufficient? Will users be able to use their own mobile devices or will the school provide devices? Should the district address the faculty and staff in the policy? What would be considered inappropriate use of the device? Who will be able to access the Internet and WWW from the devices? Will students be allowed to upload data to the devices? If there's no policy, there's no basis for consistently answering these questions (Schneier, 2004).

## Sample AUP Policies

When developing an AUP for your district, you may want to visit your state's website for assistance. The Pennsylvania Department of Education and the Virginia Department of Education can be very helpful. The National Educational Technology Plan (NTEP) is another great resource to guide your AUP writing. NTEP stresses the use of technology tools to enhance and enrich the learning environment. This plan concentrates on anytime, anywhere learning through the use of 21st century skills and tools. The goals of this plan are to increase college attendance and decrease the digital divide among our U.S. students.
Here are a few links that will assist you as you develop an AUP specifically for mobile devices.
                               ~School AUP 2.0 http://landmark-project.com/aup20/pmwiki.php?n=Main.CellPhonePolicies
                               ~ICT AUP for cell phones http://www.shambles.net/pages/learning/ict/ictaup/
                               ~AUP 2 point 0 wiki http://roxannnys.pbworks.com/AUP-2-point-0
                               ~iPod user agreements http://web.archive.org/20091027054419/ieducationappsreview.ning.com/forum/topics/user-agreement-for-ipod-touch
As your district steps into this new realm of 21st century tools, you must keep in mind that the policy you develop is never enough. Security is a people issue (Deubel, P., 2007). You need to educate the administrators, teachers, staff, and students in order to have a successful outcome. Make sure your policy addresses all users including faculty, staff and administration. Modeling proper use of the tools will improve the desired results.

## Additional Resources

42 This is a short video that addresses the small audience our students write for in their entire K-12 experience.
ABC News
Blog Policy
CBS- Cell Phone Ban
Cell Phone Projects
Classrooms for the Future
Computer World- iPods
Consortium for School Networking
COSN 2007 Compendium
Crunch Gear
iPods [www.nytimes.com/2007/10/09/education/09ipod.html]
Pennsylvania Department of Education
Public Relations Toolkit
Virginia Department of Education

## References within Text

* ↑ http://www.pewinternet.org/Reports/2010/Social-Media-and-Young-Adults/Part-2/1-Cell-phones.aspx?r=1
* ↑ http://www.innovateonline.info/pdf/vol1_issue5/What_Can_You_Learn_from_a_Cell_Phone__Almost_Anything!.pdf
* ↑ http://www.pewinternet.org/~/media/Files/Reports/2009/PIP%20Teens%20and%20Mobile%20Phones%20Data%20Memo.pdf
* ↑ http://abcnews.go.com/Technology/ipods-laptops-replacing-school-textbooks/story?id=8563292
* ↑ http://www.apple.com/education/why-apple/
* ↑ http://www.cnn.com/video/#/video/us/2010/01/21/cafferty.saudi.girl.cnn?iref=allsearch
* ↑ http://spreadsheets.google.com/pub?key=pXA5Sk606oPICUuLoE_QjQA
* ↑ http://whatis.techtarget.com/definition/0,,sid9_gci213795,00.html
* ↑ Schneier, B. (2004). Secrets and Lies. Indianapolis, Indiana: Wiley Publishing, Inc
* ↑ http://www.education.state.pa.us/portal/server.pt/community/pennsylvania_department_of_education/7237
* ↑ http://www.virginia.gov/cmsportal3/portalsearch.html?cx=006541648125353085856%3Apxkar5vs7ki&cof=FORID%3A11&safe=active&q=aup#947
* ↑ http://www.ed.gov/technology/netp-2010
* ↑ http://landmark-project.com/aup20/pmwiki.php?n=Main.CellPhonePolicies
* ↑ http://www.shambles.net/pages/learning/ict/ictaup/
* ↑ http://roxannnys.pbworks.com/AUP-2-point-0
* ↑ http://web.archive.org/20091027054419/ieducationappsreview.ning.com/forum/topics/user-agreement-for-ipod-touch
* ↑ http://thejournal.com/Articles/2007/04/02/Data-Security-in-K12-School-Districts.aspx?Page=1