The report warns of the risk to the large number of students who have personal data on school networks. The study pointed out the main areas of weakness are “application security, endpoint security, patching cadence, and network security.” Both K-12 and higher education got poor marks with respect to their information security.