Be Cyber Smart and Stay Cyber Safe

A Letter from Our CISO for Cybersecurity Awareness Month

Since 2013, I’ve had the honor of serving as Chief Information Security Officer for three remarkable organizations: the Federal Retirement Thrift Investment Board, the U.S. House of Representatives, and currently, the National Student Clearinghouse. I know firsthand how essential it is that we continue to highlight the critical importance of safeguarding ourselves and our organizations against cyber threats and fraud.

This is especially imperative in today’s digital-first world, where risks can emerge at any moment. The use of artificial intelligence (AI), for instance, is on the rise, and it can skew the way that people view and share information. Across the education sector, for example, we have seen an increase in academic fraud. Fraudulent transcripts, diploma deepfakes, and diploma mills undermine the integrity of accredited educational institutions. Plus, they can have far-reaching effects on the workforce, professional standards, and public trust in education systems.

One tactic is to leverage opportunities to strengthen verification processes as well as increase reporting and awareness. My colleagues and I talked about this in a Clearinghouse Academy webinar on September 23rd. I encourage you to watch it on-demand for further insights.

Cybersecurity at the National Student Clearinghouse

At the Clearinghouse, we understand the responsibility that comes with working in a data-driven field, and we do not take it lightly. Security, compliance, and privacy are top priorities. My team in the Office of Cybersecurity focuses on proactively preventing and mitigating threats.

Three cybersecurity practices that we implemented to keep Clearinghouse customers and employees safe are:

• Going passwordless. Cyber criminals can use compromised credentials, such as user IDs and passwords, to facilitate unauthorized access into a PC or information systems. When you go passwordless, you remove this risk. The added benefit is that you no longer must change or remember your password!
• Continuous monitoring. We scan every facet of every piece of infrastructure and code for vulnerabilities and misconfigurations. This ensures that we identify and resolve risks before a malicious actor can exploit an issue.
• Continuous audits. Independent parties continuously audit the Clearinghouse’s cybersecurity posture throughout the year. With these other sets of eyes for validation, we can be certain that we are not missing anything. Plus, it gives customers even more confidence that their data is secure with the Clearinghouse.

Our efforts have not gone unnoticed. In 2024, the OnCon Icon Awards recognized our Office of Cybersecurity as a Top 50 Information Security Team. I take pride in this recognition because it highlights the team’s dedication to maintaining the highest cybersecurity standards.

Foster a Culture of Cybersecurity Vigilance

You can implement similar practices within your organization. If you were to implement one security feature above all else, I recommend going passwordless. This practice brings a whole new level to “stopping the bad guy” while improving the overall user experience. Implementing passwordless may seem intimidating, but the process is easier than you think.

By fostering a culture of cybersecurity vigilance, you can significantly reduce the risk of cyber incidents. Every little action does matter. 

Thank you,
John Ramsey
Vice President and Chief Information Security Officer
National Student Clearinghouse

“At the Clearinghouse, we understand the responsibility that comes with working in a data-driven field, and we do not take it lightly. Security, compliance, and privacy are top priorities.”

John Ramsey
Vice President and Chief Information Security Officer, National Student Clearinghouse