1. Create a Unified Inventory
IT teams can’t manage what they can’t see. Create a unified inventory of cloud assets across all provider types; for instance, Software as a Service, Infrastructure as a Service and Platform as a Service. Include technical resources as well as vendors, data types (especially student data), integrations and owners. Be sure to tie every asset to a business purpose.
Shadow IT is as common as it ever was. Try to include it in the inventory by using automated discovery through application program interfaces, single sign-on (SSO) logs and network monitoring. Do an accounting of any required intake forms the school or district may use to uncover more.
The Ladue School District in St. Louis opted for a tool from Lightspeed Systems “to tell us about our usage,” says Patricia Brown, technology services director. That provides “a better sense of whether we want to renew.”
“We’ve instituted a process where teachers can request certain tools, and then they go through a process of checking for compliance. At the same time, we make sure that it’s something we don’t already have,” says Brown, who is also president-elect of the ISTE+ASCD board of directors. “ISTE has an evaluation tool that helps to figure out whether you’re getting the value you should, and we’ve done a lot of work with that.”
2. Tighten Security
After tackling visibility, impose consistent governance and security policies across all providers. Every cloud platform uses its own terminology and tooling, making it difficult to achieve identical configurations. Define baseline controls recommended within MS-ISAC guidance, including identity-first access (for example, SSO, multifactor authentication and role-based access), data classification and compliance, logging and monitoring requirements, and security configurations (encryption, patching and backup).
