(in)CITE Podcast - Episode 007 David Thurston, Terry Loftus, and Brendan Montagne on Cybersecurity

In this episode Jamie and Shane chat with Terry Loftus, CTO of San Diego County Office of Education, David Thurston, CTO of San Bernardino County Superintendent of Schools, and Brendan Montagne, Senior Program Specialist at MS-ISAC. 

 

Jamie's Show Notes:

Websites Mentioned:

https://www.cisecurity.org/ms-isac/ 

https://redherring.sdcoe.net/

https://www.sans.org/ 

 

New Ideas:

The project charter! What does our project approval process look like? Check out Terry’s sample here and he says “I would recommend that users list replace the logo with their own, and list their Board of Education goals and department goals (if any), to keep all work linked to the objectives of the LEA.”

Define your edge! What is the perimeter we are protecting and how this changed in the last 15 months?

Define your lenses: Who/what should be considered during project planning and decision making? (starters include security: both physical and cyber; staff, students, parents, teachers; implementation team and impacts; budget/ROI)

Cybersecurity is Everyone’s Job!

 

 

To Do List:

• Add cybersecurity needs to the LCAP
• Work through the CIS-CSAT baseline to get a sense of implementation of CIS Controls https://www.cisecurity.org/cybersecurity-tools/
• Pull at BP/ARs related to technology and make needed update
• Review the staff onboarding process
• Check out the Securing the Human course on sans.org (MS-ISAC has discounts. Review that here: https://www.cisecurity.org/services/cis-cybermarket/training/
• Chat with COE to talk about financial system and DR protocols
• Learn more about Red Herring and use for training staff
• Make a cybersecurity wishlist and determine the must haves vs. the wants
• Add cybersecurity training elements to onboarding
• Review offboarding protocols