Module Overview
Practical security hygiene and compliance basics relevant for school data: data minimization, credential storage, encryption basics, access controls, and conceptual FERPA/GDPR considerations.
Learning Objectives
- Apply basic security practices: secret management, least privilege, and encrypted transport.
- Understand key compliance concepts relevant to student data and build mitigation strategies.
- Create access controls and audit-friendly logs for sensitive flows.
Lesson-by-Lesson Breakdown
Secrets & credentials: env var best practices and rotation basics.
Data minimization and masking strategies for personal data.
Encryption in transit and at rest (high level).
Access control and role-based permissions conceptually.
Compliance overview: FERPA/GDPR concepts and school policies.
Hands-on Activities & Deliverables
Activities
Produce a security checklist for a given automation and implement a secrets-handling demo.
📦 Deliverable
Security checklist + sample logs showing masked PII.
Required Tools & Readings
Security checklist templates and plain-language compliance primers.
Assessment & Rubric
- Security hygiene completeness50%
- Clarity of documentation30%
- Compliance awareness20%
Prerequisites
Basic scripting knowledge.
Parent-Friendly Value
Parents can see explicit safeguards for student data built into projects.