Cyber Security for the Digital District

Navigation Bar

About the Project

	Security Rubric and Planning Grid: Overview

Get a solid sense of your district’s current security status and identify realistic next steps to improve your overall situation.	Level 1 - Overview: Security Preparedness Status
	Level 2 - Security Issues -- a mid-level view
Planning Grid Index	Level 3 - Security Indicators -- a detailed view
	Priority Setting Explainer
	Security Planning Template

Level 1: Overview. The District Security Rubric and Planning Grid helps set the agenda for developing a comprehensive technology security plan by clarifying the status of complex web of factors that support-- or undermine-- security.

How to use: Like all STaR (School Technology and Readiness) Charts, the District Security Rubric and Planning Grid lists, in general terms, the factors that contribute to the school district’s goal—in this case, cyber security. By comparing the examples given for “basic”, “developing”, “adequate”, and “advanced”, the evaluator can quickly acquire a sense of how well a school district has prepared itself for potential threats to its information systems, data, people, and educational objectives. After assessing your security preparedness status, you can move on to planning security remediation with the security planning protocol.

Click on any of the Security Areas for more detail.

Security Preparedness Status
Security Area	Basic	Developing	Adequate	Advanced
Management	Leadership: little participation in IT security	Leadership: aware but little support provided	Leadership: supports and funds security	Leadership: aligns security with organizational mission
Technology	Network design and IT operations: broadly vulnerable	Network design and IT operations: security implementation incomplete	Network design and IT operations: mostly secure	Network design and IT operations: seamless security
Environmental and Physical Security	Infrastructure: not secure	Infrastructure: partially secure	Infrastructure: mostly secure	Infrastructure: secure
End Users	End Users: unaware of role in security	End Users: limited awareness and training	End Users: improved awareness, mostly trained	End Users: proactive participants in security