Data Security and Course Continuity

In May 2026, Instructure (the parent company that owns Canvas) was the target of a significant security incident that allowed external parties to access sensitive data within institutions' Canvas sites. While NIU is confident in Blackboard’s security, we recognize that any cloud-based software may be susceptible to bad actors.

This guide offers practical advice for proactive steps you can take to promote data security in Blackboard. It also includes steps to ensure course continuity should Blackboard be unavailable due to a security incident. 

Precautions

• Do not store sensitive or private information in Blackboard, such as social security numbers, financial information (e.g. credit card numbers), identifiable health information (e.g., patient/client records that can be identified by name or ID), or other confidential or proprietary information.
• Do not ask students to share sensitive or private information via Blackboard, such as submitting records to Assignments.  
  Your students may or may not have ever completed an online assessment. Don't assume that they are familiar with how to complete an online assessment. Offer a sample or practice version of the type of assessment you plan to require to allow students the opportunity to become familiar with the technology.
• Blackboard is FERPA compliant but not HIPAA compliant; no identifiable health records should be shared or submitted via Blackboard, including patient information or case studies. Such information should be anonymized before sharing or submitting.

Backup Plans for Course Continuity

In the event that Blackboard is unavailable for a lengthy period of time, there are a few steps you can take in advance to ensure teaching continuity. There are also a few ways you can continue teaching without access to Blackboard.

Course Materials

• Maintain copies of course materials outside of Blackboard, such as in OneDrive, so that they remain accessible to you in the event that Blackboard is unavailable. These can be shared with students directly via OneDrive or sent as email attachments.
• Print exams delivered via Blackboard as a PDF to save in case they need to be delivered offline (i.e., via paper and pencil).
• Periodically download Gradebook records as a backup. Store these in OneDrive for better security. If saved locally to a computer, ensure that the computer has adequate security to protect the records.

Communication

• Download the MyNIU roster in advance to have quick access to student names and contact information.
• Email students via MyNIU, in the event that Blackboard is unavailable. You can also communicate with students via email or text message through Navigate.
• Access Zoom directly at niu-edu.zoom.us to access any Zoom sessions that were scheduled via the Blackboard integration, create a new Zoom session, and share recordings.
• Schedule Teams meetings directly via the Teams or Outlook apps. Links to Teams sessions can be copied from your calendar and emailed to students, including any Teams sessions that were scheduled via the Blackboard integration.
• Offer flexibility on deadlines when Blackboard outages occur, particularly for extended outages.

Other Instructional Technology Platforms

Similar precautions should be taken with other platforms or systems you may be using for teaching, such as Kaltura, VoiceThread, Yellowdig, and others.

• Kaltura: store copies of media uploaded to Kaltura in OneDrive. In the event of a Kaltura outage, videos can be shared directly via OneDrive (although without the additional metrics/tracking provided by Kaltura).
• VoiceThread: export VoiceThreads you produce as .mov files and store in OneDrive.
• Yellowdig: exercise caution in the content you and students share via Yellowdig. Periodically export reports of activity for grading purposes.
• Publisher platforms: if possible, export student activity logs or grades periodically as a backup.