As security concerns grow, phishing attacks are threatening students and educators in schools across the country. The Cybersecurity Infrastructure Security Agency’s new K-12 Report outlines what schools can do to better protect their systems from cyber intrusions and overall risks. The report highlights three key areas, including investing in security controls, addressing resource constraints and focusing on information sharing. CISA is also collaborating with the Department of Education to boost security in technologies schools depend on. Kelly Thiele, chief of phishing assessments at CISA, discusses more about this report, as well as how the agency’s six core principles from its Cyber Essentials Guide provide simple, prioritized actions that other organizations can take to ensure their systems and workforce are cyber ready.