This guide was developed specifically for educational administrators at the building, campus, district, system, and state levels, and is meant to serve as a framework to help them better understand why and how to effectively secure their organization's information, software, and computer and networking equipment. This document is organized into 10 chapters/content areas: (1) Why Information Security in Education?; (2) Assessing Your Needs (Risk Assessment); (3) Security Policy: Development and Implementation; (4) Security Management; (5) Protecting Your System: Physical Security; (6) Protecting Your System: Information Security; (7) Protecting Your System: Software Security; (8) Protecting Your System: User Access Security; (9) Protecting Your System: Network (Internet) Security; and (10) Training: A Necessary Investment in Staff. Each chapter includes: an overview, commonly asked questions, anecdotes illustrating real-world relevance, security guidelines (actual recommendations), and a summary checklist of "things to do" (based on the guidelines). Key points about the development and implementation of effective information security policies are conveyed throughout the document. A glossary, index, and appendices containing additional resources about computing, a FERPA Fact Sheet, related NCES publications, sample acceptable use agreements, a bibliography and selected reference materials and citations are included. (AEF)