With the rapid development of information technology, schools are placing increasing importance on cybersecurity. Pui Kiu College is one of the schools under the long-established Pui Kiu education institution in Hong Kong. As a through-train school facing an increasingly complex network environment, Pui Kiu College chose Palo Alto Networks for its unique strengths to comprehensively monitor the school's cybersecurity and simplify staff's daily work. Mr. Tam Chun Tung, Director of Information Technology at Pui Kiu College, shared with us the school's commitment to IT and the specific measures taken to strengthen its cybersecurity.

1) Pui Kiu College Campus Development and IT Investment

1.1 The Pui Kiu College campus was completed in 2005. How does the IT investment at that time compare with today's requirements?

Mr. Tam Chun Tung: Pui Kiu College was completed in 2005, and IT investment has changed significantly compared with today's standards. The school has not only upgraded electronic equipment across the campus, such as replacing traditional whiteboards with interactive whiteboards, but has also invested substantial resources to make teaching more convenient and help students learn more effectively.

1.2 How does the school's use of IT equipment differ from that of a business?

Mr. Tam Chun Tung: We have around 2,000 students and 250 teaching and non-teaching staff, so our needs for equipment and IT support are similar to those of a business. Our server and network infrastructure is relatively large, and the equipment we use must meet enterprise standards to support daily operations.

1.3 To provide the best resources for students, how many people are on your IT support team? What are their main responsibilities?

Mr. Tam Chun Tung: Pui Kiu College currently has 12 full-time IT specialists who provide day-to-day IT support, including network management, maintenance and the management of technical infrastructure. Together with teachers with ICT expertise, our overall IT support team has around 17 members. We will continue to strengthen the team to better meet the needs of students and staff.

2) Cybersecurity Challenges and Technology Choices

2.1 How has your school developed in terms of cybersecurity?

Mr. Tam Chun Tung: We place great importance on cybersecurity, especially as our data volume has grown significantly. For example, the school receives five to six thousand applications each year, and the number continues to rise, so protecting personal data has become our top priority. Our management, including the Principal, clearly values IT security and has invested substantial resources to strengthen our cybersecurity. Specific measures include:

- Data encryption: All personal data of students and applicants is encrypted to prevent unauthorised access.

- Firewalls and security software: We use advanced firewalls and security software from Palo Alto Networks to protect the school network from external threats. These technologies provide deep packet inspection, automated protection and real-time threat intelligence, enabling us to effectively monitor and respond to potential attacks.

- Access control: Strict access control permissions are in place to ensure only authorised personnel can access sensitive data.

- Privacy policy: A clear privacy policy is provided when students and parents apply, so that everyone involved understands how their data is used and protected.

2.2 What has been the biggest challenge your school has faced in addressing cybersecurity issues?

Mr. Tam Chun Tung: The biggest challenge was the initial shortage of manpower, which meant we could not handle all security needs in a timely manner. In the past, we relied on a single antivirus program to detect potential security issues, but at times it failed to block viruses in time, requiring colleagues to carry out manual checks. As our user base grew, we needed to manage device status more effectively, so we sought a more comprehensive, integrated cybersecurity system that could address security issues on all fronts while making day-to-day operations easier to manage.

IT Tips

How Is XDR Different from Antivirus Software?

Most people are only familiar with antivirus software, but Extended Detection and Response (XDR) is better suited to businesses and organisations that need comprehensive security monitoring and rapid response.

Antivirus software typically protects a single device from common malware, analysing and blocking known malware attacks through a single process. When faced with a series of attacks, its response may not be comprehensive enough, and in-depth investigation may need to be done manually.

Compared with antivirus software, XDR consolidates multiple security data sources (such as endpoints, networks, servers and email) into a single platform, using AI and machine learning to automatically detect threats and prevent cyberattacks, and to identify complex attack patterns. With built-in automated data analysis, XDR can quickly disrupt attacks in progress and improve the efficiency of security operations.

Antivirus software provides basic protection, while XDR delivers holistic security with more advanced detection, response and investigation capabilities. For the general public, antivirus software may be the go-to choice for everyday use, but for businesses facing increasingly complex cyber threats, XDR is the more powerful option.

2.3 How has your partner SMARTS helped you in implementing cybersecurity solutions?

Mr. Tam Chun Tung: SMARTS has been tremendously helpful in implementing our cybersecurity solutions. We have worked with them for many years, and whenever we encounter a problem or need to choose a new solution, they proactively help us find the right one. With their extensive experience and strong relationships with major vendors, we can quickly obtain solutions that fit our needs. Even though our contract with the previous partner was about to expire, the product migration went very smoothly, and we completed it successfully even during the busy Christmas period. The technical support from SMARTS gave us greater peace of mind during deployment, and their professional advice helped us complete the entire migration smoothly. With SMARTS' support, we have been able to select and implement cybersecurity solutions more efficiently and reliably, strengthening our overall security protection.

2.4 Could you share why you chose your cybersecurity technology or products?

Mr. Tam Chun Tung: The Cortex Cloud platform is user-friendly, with an intuitive interface that allows us to easily identify and investigate security incidents. Our systems need to support multiple platforms, including Windows, Linux, Mac, Android and iOS, and Palo Alto Networks' products have delivered a great experience here, with compatibility across different operating system versions. In addition, Cortex Cloud's rapid response capabilities and up-to-date technology updates ensure we are always using the most suitable solution.

The integration and compatibility of Palo Alto Networks' products have significantly improved our system efficiency and reduced the risk of cybersecurity incidents. The integrated platform enables us to detect potential risks in advance and effectively block imminent attacks. The platform clearly shows the attack patterns and dwell time of malware, which not only drives system automation but also greatly reduces the need for manual checks, minimising the impact of potential risks.

3) Raising Cybersecurity Awareness and Future Outlook

3.1 In terms of education, how do you raise cybersecurity awareness among teachers and students? Do staff receive regular cybersecurity training?

Mr. Tam Chun Tung:  Every year before the new academic year, our school holds a general staff meeting where we introduce the IT department's direction and latest developments for the coming year, especially in cybersecurity. We share real-life cases so that colleagues understand today's fast-changing security challenges.

To educate teachers and students, we take the following measures:

- School-wide alerts: When a major security incident occurs, we send school-wide email notifications and use internal apps to remind colleagues to stay vigilant.

- Knowledge base: We have built an internal knowledge base where colleagues can access IT and security information and guidelines at any time, helping them identify potential security threats.

- Technical skills training: We place particular emphasis on cybersecurity education for students. Over the past two years, we have provided secondary students with a variety of hands-on opportunities, such as visiting large-scale data centres at IT companies to see the technology used in real workplaces. We also teach them basic hardware assembly, how to use virtual machines (VMs) and how to set up Wi-Fi routers, helping them understand how different technologies work.

- IT Prefect Programme: We train students to become IT prefects, helping them learn basic IT skills and then teach fellow students basic computer knowledge. Through teamwork and project management training, we strengthen students' leadership skills.

- Talks and sharing sessions: We invite IT heads from businesses and regularly prepare topical cybersecurity issues, so that students can learn about cybersecurity and IT from different perspectives. We also co-organise talks with Palo Alto Networks to give students deeper insights into cybersecurity.

Pui Kiu College hopes not only to enhance students' IT skills, but also to help them recognise the diversity and potential of the IT industry and spark their interest in learning. With the government promoting IT development amid a shortage of professionals, we hope more graduates will return to the school as IT teachers in the future and give back to their alma mater.

3.2) What is your outlook for the future of cybersecurity?

Mr. Tam Chun Tung: Through our continued collaboration with SMARTS and Palo Alto Networks, we will keep strengthening our cybersecurity protection, ensuring all personal data is fully protected, and laying a solid foundation for nurturing future IT professionals.

Pui Kiu College's efforts in advancing cybersecurity not only reflect its commitment to protecting students' personal data, but also demonstrate the school's forward-looking vision in information technology. Through its collaboration with Palo Alto Networks and SMARTS, the school has strengthened its cybersecurity protection and created a safe learning environment for students. Amid the wave of digitalisation, Pui Kiu College aspires to be a pioneer in cybersecurity and technology education, paving a brighter path for students' futures.

To learn more about Palo Alto Networks products and how to strengthen your cybersecurity, please contact the SMARTS team.

Whatsapp: 90149735

email: cs-enquiry@smarts.hk