DATA S H E E T

Education Industry Brief

Education Industry: Cybersecurity is More Vital Than Ever

455

64%

41%

cybersecurity incidents werereported by the education
sector in 20191

don’t believe their existing IT
infrastructure will protect them against
cyberattacks in the next 12-18 months2

of higher education cybersecurity
incidents and breaches were causedby social engineering attacks3

The Education Security Challenge
Out of 17 major industries, education ranks last in cybersecurity
preparedness4. The education industry has vulnerable data,
including personal information about staff and students at every
level, from K-12 to higher education. The sudden shift to remotelearning this year has caused a drastic increase in the numberof cyberattacks for education institutions and those studying
remotely. This means exposure from connecting to unsecured
networks while large amounts of data are being shared outsideof a more controlled educational facility.

How Keeper Helps
Keeper’s business password management solutions give school
IT administrators complete visibility into employee, student,
and parent usage of school-related login credentials, enablingthem to monitor password use across the entire network andenforce policies such as strong passwords, 2FA, and othersecurity protocols. Keeper also helps secure remote learningand home-schooling environments by enforcing role-based
access to internal systems while Keeper auto-fill feature helps
prevent phishing attacks by only auto-filling credentials on sites
stored in the Keeper Vault.

Email Auto-Provisioning
Large organizations such as school districts or universities canprovision Keeper vaults to thousands of users - such as educators,
teachers and students - with a domain match on email addresses.
With minimum administration, large-scale deployment can beaccomplished using an existing email channel or portal.

IT Admin InsightEvery user is provided a secure digital vault. A security
dashboard in the Admin Console provides an overview of weakpasswords, password reuse and two-factor authentication
enforcement. Keeper enables role-based access controls
to enforce least privilege policies. Administration may bedelegated to department or team leaders and folders andrecords can be securely shared and revoked. The vault of anadministrator or staff member who leaves can be automaticallylocked and be securely transferred. Access logs to Keeper
vaults can be audited for compliance or forensics.

Zero-Knowledge Architecture
All encryption and decryption is done on the user’s device.
PBKDF2 with 100,000 rounds is used for deriving a key fromthe user’s master password. Each record is encrypted using
AES-256 with a different and unique key that is randomly
generated client-side. RSA encryption is used for secure record
sharing between users and teams. Keeper’s infrastructure syncs
encrypted ciphertext between devices. Key pinning is enforced
between client and server. All data in transit and at rest is always
encrypted - it cannot be viewed by Keeper Security employees
or any outside party.

Microsoft Active Directory
Synchronization Keeper® AD Bridge synchronizes to Microsoft
Active Directory or Open LDAP. This enables rapid user
provisioning and automatically adds Nodes (organizationalunits), Users, Roles and Teams. Keeper enables role-based access
control and the ability to track roles as people move throughout
the organization. This includes automatically locking vaults ofemployees that leave.

Automate Back-End Password Rotation
Keeper® Commander SDK provides IT admins and developers
with command-line tools and Python source code to perform
password management, password rotation and vault functionality
and eliminate hard-coded or plaintext back-end passwords.
Connectors include Unix, Windows and AD logins; Oracle,Microsoft SQL, MySQL, Postgres and Dynamo databases; andAWS password and API access keys.

© 2021 Keeper Security, Inc.

DATA S H E E T

Education Industry Brief

Two-Factor Authentication

About Keeper Security, Inc.

Keeper supports Two-Factor Authentication (2FA) including SMS,Keeper DNA® (smartwatch tap), TOTP (e.g. Google Authenticatorand Authy), FIDO U2F (e.g. Yubikey), Duo and RSA SecurID. 2FA
may be enforced through role-based controls.

Azure AD Sync (SCIM) & Provisioning API
Keeper supports the ability to seamlessly provision users andteams from Microsoft Azure AD or other identity platforms using
the SCIM protocol. Keeper also supports API-based, commandline provisioning through the use of Keeper® Commander SDK.
The Keeper Commander SDK is open source Python code thatis available for download from Keeper’s Github Repository.

Keeper Security, Inc. (Keeper) is the market-leading, top-rated
cybersecurity platform for preventing password-related data
breaches and cyberthreats. Keeper’s zero-knowledge security
and encryption software is trusted by millions of people andthousands of businesses across the globe to mitigate the risk ofcybertheft, boost employee productivity and meet compliancestandards. Keeper has been named PC Magazine’s Best
Password Manager of the Year & Editors’ Choice, PCWorld’s
Editors’ Choice and is the winner of four G2 Best SoftwareAwards and the InfoSec Award for Best Product in Password
Management for SMB Cybersecurity. Keeper is SOC-2 and ISO
27001 Certified and is also listed for use by the U.S. federal
government through the System for Award Management (SAM).
Learn more at https://keepersecurity.com.

Integration with Leading SSO Solutions
Keeper® SSO Connect integrates into your IdP and is the perfectsolution for applications that don’t support SAML protocols. Keeper
also provides users with privileged access a secure vault to store
all of their non-SSO passwords, digital certificates, encryption keys
and API access keys.

Keeper Third-Party Attestations and Certifications

Keeper Awards and Recognition2020 Enterprise Leader
4.7 out of 5 stars

1

PurpleSec2

PurpleSec

3

Cybercrime Magazine

Editors’ Choice
4.5 out of 5 stars

4

Gartner Peer Insights
4.8 out of 5 stars

Spiceworks
5 out of 5 stars

Cisionkeepersecurity.com | sales@keepersecurity.com

REV 4.19.21 © 2021 Keeper Security, Inc.