Data Privacy & Information Security

This application enables districts to compile a list of their software inventory as well as linking to third-party vendor’s software privacy policies and notices, thus enabling districts to comply with the provisions of the New York State Parents’ Bill of Rights. Over 800 products are currently included in the database, and districts may submit requests for additional products.

Quarterly newsletter on the topic of data privacy and security with current information, effective strategies, best practices, and leadership resources.

The D3 is a comprehensive webinar on a featured topic from the Digital Digest.

Timely information as it occurs to keep districts informed of the latest developments in the field.

Web-based security awareness training that follows a structured outline, including a formal assessment and printable certificate of completion. Materials are made available through the RICone initiative. 
 

Regular forums for district data security personnel to meet and learn from security professionals, hear about the latest security/compliance news from NYSED, and share best practices around cyber security. 

Proper planning starts with proper direction and guiding documents. Districts will be provided best practice documents and templates to help support their data security planning; including documentation for: Information Security Policy, Internet Access & Security Policy, Privacy Policy, Incident Response Policy, Breach & Security Failure Notification Policy, Risk Management Plan, Disaster Recovery Plan, and Parent Bill of Rights.

KnowBe4 is an integrated platform for security awareness training combined with simulated phishing attacks.  The service integrates baseline testing using mock attacks, followed by engaging, interactive, web-based training, and continuous assessment through simulated phishing, vishing and smishing attacks to build a more resilient and secure organization.  The service provides a library of security awareness training content; including interactive modules, videos, games, posters, and newsletters.  Pricing is per employee/per year, and for the greatest success, should include all district employees.  Support for creating email campaigns, report generation, and initial setup is provided.

The Security Assessment & Testing service allows districts to work with third party IT companies to build a customized security program.  Services include risk assessments, cybersecurity training, awareness campaigns, incident response and tabletop planning, internal/external network penetration testing, policy development and review, wireless network testing, network architecture reviews, and more.  Services can be customized to meet district needs.  Please note, we are currently vetting vendors and obtaining contracts for these services so some services may not be immediately available.  Please contact me for more information.

*Price is variable based on level of service