How educational institutions are securing their data before breaches happen