Zero Breach Zone

Welcome to episode 14 of the Zero Breach Zone, in this episode hosts Phil Hintz and Andy Lombardo dive into the current state of K-12 cybersecurity, analyzing key findings from the Cisco Talos 2024 report. They explore the concerning rise in ransomware attacks targeting educational institutions, the struggles schools face with limited security budgets, and practical strategies for strengthening cyber defenses. The conversation covers the critical importance of regular system monitoring, vulnerability patching, and addressing MFA weaknesses that leave schools exposed. Phil and Andy emphasize that human factors remain one of the biggest security challenges, highlighting how effective security awareness training can significantly reduce risk when implemented thoughtfully. The discussion also examines the growing relevance of zero trust architecture and how phishing attacks continue to be cybercriminals' preferred entry point to school systems. Throughout the episode, they stress that despite being perceived as low-value targets, K-12 schools are increasingly in cybercriminals' crosshairs, making collaboration among education cybersecurity professionals more important than ever.

Key Takeaways:

• K-12 education is increasingly targeted by cybercriminals despite being perceived as low-value
• Educational institutions now lead in ransomware attacks, with incidents peaking during school breaks
• Budget constraints severely limit cybersecurity initiatives in schools
• Fundamental security practices are critical: regular monitoring, patching systems, and addressing MFA vulnerabilities
• Security awareness training delivers strong ROI when implemented effectively
• Email security and phishing prevention remain essential first-line defenses
• Creating a culture of cyber awareness among all staff is fundamental to protection
• Zero trust architecture and data-driven security decisions are becoming increasingly important
• Collaboration among education cybersecurity professionals is vital for improving collective defense
• Proactive measures and basic cyber hygiene significantly reduce exposure to attacks

Resources Mentioned:
- Cisco Talos 2024 Cybersecurity Report
- CyberNut Security Awareness Training for K-12
- cosn.quorum.us/campaign/115693/
- Parting Tool: Rust Desk as a fee alternative to TeamViewer on Andy's Blog EdTechIrl  (@edtechirl on substack)

Chapters

00:00 Introduction to K-12 Cybersecurity

02:49 Insights from Cisco Talos 2024 Report

06:04 Understanding the Target: K-12 Education

08:56 Challenges in Cybersecurity Funding

11:57 The Importance of Regular Monitoring and Patching

15:02 Security Awareness and Human Factors in Cybersecurity

20:19 Navigating Email Security Challenges

23:22 Building a Culture of Cyber Awareness

25:14 Understanding Spoofing and Phishing Attacks

27:31 Ransomware Trends and Threats

30:12 The Rise of Ransomware as a Service

39:56 Proactive Measures Against Ransomware

43:35 Remote Access Solutions for Security

Welcome to episode 13 of the Zero Breach Zone! In this episode hosts Phil Hintz and Andy Lombardo speak with Jeff McCoy, Associate Superintendent for Academics in Greenville County, South Carolina. Drawing from his 25+ years in education, Jeff discusses the integration of technology in schools, emphasizing the distinction between vendors and solution partners. The conversation highlights cybersecurity as a shared responsibility across all departments, not just technology. Jeff stresses that security training should be continuous rather than annual, using short, clear communications. The discussion covers how data breaches often involve academic software, the importance of evaluating vendors' security practices, and the need for transparency with AI implementation in education. Jeff emphasizes that technology should ultimately enhance teaching and learning, requiring proper change management and cross-departmental collaboration. As this weeks Parting Tool, Jeff highlights the crucial role of 1EdTech, a global non-profit that develops open standards to reduce complexity, accelerate innovation, and expand educational possibilities worldwide.

Key Takeaways:
- Cybersecurity is a shared responsibility across all departments, not just technology
- Distinguish between vendors (who sell products) and solution partners (who address needs)
- Cybersecurity training should be continuous, using short, clear communications
- Data breaches frequently involve academic software, not just administrative systems
- Multi-factor authentication is essential for protecting school systems
- Vendors must be evaluated for their cybersecurity practices and certifications
- AI in education requires transparency about data usage and privacy
- Technology should enhance teaching and learning, not complicate it
- 1EdTech provides valuable resources for vetting educational apps

Resources Mentioned:
- Multi-factor authentication solutions
- Greenville County Schools' cybersecurity protocols
- Educational technology evaluation frameworks
- Parting Tool: 1EdTech for vetting educational applications

Welcome to episode 12 of the Zero Breach Zone! Join hosts Phil Hintz and Andy Lombardo as they sit down with Michelle Krieger to explore topics top of mind at the intersection of education and cybersecurity recorded at FETC. In this energetic conversation, Michelle shares her unique journey from Special Education Teacher to Education Innovation to Data Protection Officer, to Director of Technology. Michelle offers valuable insights on the importance of data protection in increasingly digital learning environments. The discussion delves into crucial aspects of differentiating between Director of Technology and data protection officer roles. Everyone emphasizes the importance of "secure by design" principles, sharing examples of how schools can implement data privacy practices from the ground up rather than as afterthoughts. Drawing from her classroom experience, Michelle shares stories about working with students of all ages on online safety, from using a baking metaphor with elementary school kids to discussing deep fakes with high schoolers. Michelle's practical approach to making security concepts accessible to both educators and students resonated throughout the conversation, particularly when discussing the balance between technological innovation and responsible data stewardship. This episode is a must listen to all interested in edtech and cybersecurity!

Key Takeaways

• The critical importance of data protection and cybersecurity in educational settings 
• Challenges of implementing technology in schools while maintaining privacy 
• Necessity of tailored cybersecurity training for educational staff and all school employees (from teachers to bus drivers)
• Proactive approaches to protecting student data and retention evaluation
• Strategies for engaging students in cybersecurity education from elementary to high school
• Building effective collaboration between educators and technology providers 
• The evolving landscape of data privacy practices in education

Resources Mentioned: 

• Secure by Design & SIS
• Data Guard by ClassLink 
• Antoinette King's book, The Digital Citizen's Guide to Cybersecurity
• The Cybersecurity Rubric
• Parting Tool: Explaining to your Superintendent or School Board the difference between the role of Director of Technology & Data Protection Officer 

Welcome to episode 11 of the Zero Breach Zone! Join us for an enlightening conversation with  Scott Bailey, former superintendent and educational innovator from Desert Sands School District. Through his engaging storytelling, Bailey shares candid experiences from his work across Nevada's largest school districts, including Clark County School District with 314,000 students and Washoe County School District serving the Reno-Tahoe area. His firsthand account of managing the initial COVID-19 outbreak and spearheading the rapid transition to online learning provides valuable insights into crisis management at scale. Drawing from his extensive background in education leadership, Bailey addresses the evolving landscape of digital security in schools with a refreshing mix of wisdom and practical experience. His approach to balancing technological advancement with student safety, coupled with his deep understanding of crisis response planning, demonstrates why he's become a respected voice in educational cybersecurity. Through real-world examples and lessons learned, his emphasis on the crucial partnership between educational leaders and technology officers provides a blueprint for creating secure, innovative learning environments.

Key Takeaways

• The fundamental importance of student connectivity for educational equity
• Essential elements of cybersecurity implementation in educational settings
• Building effective crisis response strategies through proactive planning
• Developing comprehensive security frameworks that address both physical and cyber threats
• The critical role of relationship-building in addressing cybersecurity challenges
• Implementing effective tabletop exercises for cybersecurity scenarios
• Strategic approaches to protecting student data privacy
• Creating sustainable innovative practices while maintaining security
• The importance of holistic safety planning in educational environments
• Methods for assessing and improving institutional cybersecurity posture
• Strategies for effective communication during security incidents
• Balancing technological advancement with security requirements

Resources Mentioned

Educational Institution Crisis Response Framework
Student Data Privacy Compliance Resources
Digital Equity Implementation Toolkit
Cybersecurity Assessment Guidelines for Schools
Parting Tool: TriVigil Security Assessment Platform for Education

#EdTech #Cybersecurity #EducationalLeadership #SchoolSafety #DigitalEquity #StudentPrivacy #CrisisResponse #SecurityPlanning 

Welcome to episode 21 of Zero Breach Zone! In this hosts Andy Lombardo and Phil Hintz welcome Itza White, the Director of Cybersecurity for Five Star. The group discusses the unique challenges of cybersecurity in K-12 education, the importance of documentation, and building a culture of security awareness. Itza shares her journey into cybersecurity, two big challenges schools face including the rising significance of cyber insurance, and the need for effective incident response plans. The conversation also highlights the importance of empowering women and girls in technology and the resources available for schools to enhance their cybersecurity posture. 
 
 Key Takeaways

•  Cybersecurity in K-12 requires special considerations. Documentation is crucial for effective cybersecurity practices.
•  Everyone in a school is part of the security team.
•  Cyber insurance requirements are constantly evolving.
•  Building a culture of security awareness is essential.
•  Training can often be done at low cost.
•  Incident response plans should be tested regularly.
•  Partnerships with cybersecurity firms can provide valuable resources.
•  Empowering women in technology is important for the industry's development.

Resources Mentioned

•  Parting Tool: Five Star's Cyber Incident's Readiness Check - a free 20 questions tool for assessing cybersecurity readiness

Welcome to episode 10 of Zero Breach Zone! Join us for our continued FETC 2025 coverage featuring Dr. Joe Phillips, CTO of Fulton County Schools. In this insightful conversation recorded live at the conference, Dr. Phillips draws from his unique background in both education and military service to address the complex challenges facing large school districts. Beyond introducing his innovative PLANT AI model, he shares a compelling perspective on how Moore's Law has given way to an era where technological disruption is actually accelerating the pace of disruption itself. His deep understanding of AI's transformative potential, coupled with his measured approach to implementation, showcases why he's become a leading voice in educational AI awareness. As the host of the newly launched 'Safe and Innovative Schools' podcast, Dr. Phillips brings a fresh perspective on balancing innovation with security in modern educational environments.

Key Takeaways 

• The distinctive challenges of implementing innovation in large school districts 
• Critical considerations for K-12 cybersecurity and data privacy 
• Understanding and implementing the PLANT AI model for education 
• How technological disruption is accelerating beyond Moore's Law predictions
• Strategies for developing structured technology approval processes 
• How AI can address resource limitations in education 
• Benefits of a layered approach to school safety 'Swiss Cheese Appraoch'
• The importance of responsible AI awareness in education 
• Evolution of data privacy agreements in the AI era
• The critical role of educational leaders in guiding AI integration 
• Military insights applied to educational technology 
• Practical implementation of innovative security measures

Resources Mentioned

• FETC Conference 2025 Resources 
• PLANT AI Model by Joe Phillips 
• 'Safe and Innovative Schools' Podcast by Joe Phillips 
• K-12 Cybersecurity Framework 
• Data Privacy Agreement Insights for App approvals - FERPA/ COBA 
• Parting Tool: Microsoft Co-Pilot for use in K-12

#FETC2025 #EdTech #Cybersecurity #Education #SchoolSafety #AI #TechDisruption #AIAwareness

Welcome to episode 20 of Zero Breach Zone! Hosts Andy Lombardo and Phil Hintz sit down with Mindy Fiscus, a 25+ year veteran in the world of education technology and the Director of Government Affairs & E-Rate at the Learning Technology Center of Illinois. Mindy brings a wealth of experience and passion to the conversation, sharing her journey through the evolving EdTech landscape and the pivotal role that E-Rate has played in connecting classrooms across the country.
Together, they unpack the future of E-Rate amidst legal challenges, the urgent need for cybersecurity funding in K-12 schools, and how Illinois has emerged as a leader in the federal cybersecurity pilot program. Beyond funding and policy, Mindy emphasizes the power of collaboration within the EdTech community, the growing movement to empower women in IT, and the critical importance of advocacy to ensure schools have the resources needed to protect students and advance learning.
Whether you’re an IT professional, school leader, or advocate for equitable access to technology, this episode offers both inspiration and practical tips for navigating the E-Rate process, engaging your community, and shaping the future of education technology.

Key Takeaways:
• Mindy Fiscus brings over 25 years of expertise in EdTech and advocacy
• E-Rate remains essential for building and sustaining classroom connectivity
• Cybersecurity funding is now a top priority for K-12 schools
• Illinois leads in projects under the new cybersecurity pilot program
• Collaboration among educators, IT leaders, and policymakers drives success
• Women in IT are advancing through networking and empowerment initiatives
• Advocacy is vital to secure resources and expand E-Rate opportunities
• E-Rate consultants and resources can help schools maximize funding
• Understanding the history of E-Rate strengthens future applications
• Community engagement is key to effective EdTech implementation

Resources Mentioned:
• Learning Technology Center of Illinois (LTC)
• E-Rate Program Documentation & Resources (see parting tools)
• Parting Tool 1: E-Rate Central provides a comprehensive range of information and consulting services about the E-Rate program and E-Rate funding opportunities
• Parting Tool 2: Funds For Learning helps you navigate the E-rate funding process, & provides articles + support 

Chapters:
00:00 – Introduction to the Zero Breach Zone Podcast
06:05 – The Cybersecurity Pilot Program
12:09 – E-Rate Legitimacy and Future Concerns
20:11 – Ensuring Student Safety in Technology Integration
26:55 – Empowering Women in Technology
34:39 – E-Rate Insights and Resources

Welcome to episode 9 of Zero Breach Zone! Put on your spurs and join us for our first episode in our special FETC 2025 series! Hosts Andy & Phil kick off our conference coverage with master storyteller Dr. Sheryl R. Abshire, a 40+ year education technology pioneer whose deep understanding of policy and government has shaped educational technology across the nation. Her compelling narratives and unique perspectives come from a remarkable journey that spans from implementing the first Apple II computers to leading cybersecurity initiatives as CTO of Calcasieu Parish School System. Through years of advocating at state and federal levels, Dr. Abshire has developed an unparalleled understanding of educational technology policy and its real-world impact on schools. Her diverse experience - including classroom teaching, school administration, successful grant writing, and technology leadership - combined with her gift for storytelling, provides invaluable insights into how passionate educators can shape the future of technology in schools. As co-author of "The Savvy Ed Tech Leader" and one of the original pioneers of the E-Rate program's first year, Dr. Abshire demonstrates how dedication to lifelong learning and proactive leadership can transform educational technology.

Key Takeaways:

• Tracing the evolution of educational technology from Apple II computers to AI integration

• How E-Rate's first year implementation transformed internet access in schools and what E-Rate is up against today 

• The importance of understanding how technology has been integrated across all curriculum areas

• Critical cybersecurity considerations for modern educational institutions

• Insights from serving as both educator and technology leader

• The continuing importance of professional development and certification (ISTE, CCRE)

• Practical wisdom for aspiring education technology leaders fr her book The Savvy Ed Tech Leader

• The role of mentorship in developing future EdTech leaders

• The recent PowerSchool Breach and its implications 

• Balancing innovation with security in today's educational environment

Resources Mentioned:

• "The Savvy Ed Tech Leader" by Dr. Sheryl R. Abshire and co-authors

• FETC Conference 2025 Resources

• E-Rate Program Documentation

• Cybersecurity Rubric Evaluation Framework

• ISTE Certification Program

• The Cybersecurity Rubric

#FETC2025 #EdTech #Cybersecurity #Education #SavvyEdTechLeader

Welcome to Episode 19 of Zero Breach Zone. In this episode, hosts Andy & Phil  interview Duane Shaffer, the director of technology services at the Learning Technology Center of Illinois. They discuss the importance of cybersecurity and data privacy in K-12 education, the vision behind the IT summit, and the role of documentation in enhancing cybersecurity practices. Duane shares insights on the Trusted Learning Environment SEAL program and emphasizes the significance of community collaboration among school districts. The conversation concludes with practical tips for technology directors.

Key Takeaways:

• The summit aims to bring IT professionals together for networking and learning
• Cybersecurity and data privacy are critical focuses for K-12 education
• Documentation is essential for effective cybersecurity practices 
• The Trusted Learning Environment TLE Seal & Mini Seal program helps districts improve data privacy, and build robust cybersecurity infrastructure 
• Positive reinforcement of the TLE Seal & Mini Seal program by CoSN helps validate districts and create good buzz and visibility  
• Collaboration among districts enhances resource sharing and problem-solving 
• Creating a culture of intentional effort in cybersecurity is vital through conferences 
• The cohort model fosters community and shared learning experiences.
• Parting Tool: Duane recommends using Google's Notebook LM to streamline policy or management of any long complex documentation, you can simply search your question and it acts as a personal guidebook

Chapters:

00:00 Welcome to the Zero Breach Zone
05:03 Focus on Cybersecurity and Data Privacy
11:08 The Importance of Documentation
17:10 Parting Tips and Tools for IT Directors

Welcome to Episode 18 of Zero Breach Zone. Hosts Phil Hintz and Andy Lombardo sit down with Maurice Payne, Director of IT for Decatur Public Schools, to talk about his journey from corporate America to K–12 EdTech.

Maurice shares his approach to leading technology in a school district, what excites him most about tackling cybersecurity challenges, and why moving toward NIST standards is critical for accountability and continuous improvement. He also reflects on his time in the CTO Academy and the powerful mentorship he received from EdTech leaders Sheryl Abshire and Frankie Jackson (both past podcast guests).

Whether you’re an IT leader, educator, or EdTech partner, this episode is packed with insights on building secure, future-ready schools.

Key Takeaways:

• Maurice Payne’s transition from corporate IT to K–12 EdTech leadership
• His approach to the role and key cybersecurity priorities
• Lessons from the CTO Academy and mentorship from Sheryl Abshire & Frankie Jackson
• Why NIST standards matter for accountability and improvement
• Breaking cybersecurity into manageable steps
• E-rate funding’s role in advancing EdTech
• Building networks and driving continuous improvement
• The importance of governance, documentation, and staff buy-in
• Parting Tool: Always remember the power of networking and stepping outside your comfort zone—whether it’s within your district or at a conference. Learning from peers and building support networks is essential for growth

Chapters:

00:00 Introduction to EdTech and Jennifer Womble
03:01 Jennifer's Journey in Education
06:09 The Evolution of FETC
09:02 Building a National EdTech Community
11:56 Cybersecurity in Education
14:58 Creating a Collaborative Learning Environment
18:00 Intentionality in Conference Design
21:04 Engaging Students in Cybersecurity Awareness
23:31 The Importance of Cybersecurity Education
24:54 Engaging Students in Cybersecurity
26:56 Understanding Cyber Threats
28:43 Data Privacy and Student Awareness
30:07 Innovative Tools for Educators
32:42 Experiential Learning in VR
37:21 FETC Insights and Opportunities