Schools often don't prioritize or understand cybersecurity