Getting Started with Cybersecurity
CoSN’s EdTech Leadership Survey consistently identifies cybersecurity as a top priority for school system IT Leaders. School system leaders, including technology leaders, need to protect their networks and information security, analyze their current status, and validate what they are doing well. CoSN provides tools and resources that provide insight into how risk can be further reduced in ways that help technology leaders contribute to their schools' primary goals of teaching and learning. We also offer assistance to district technology leaders who are working to ensure safety for both students and staff.
CoSN Cybersecurity Project Director: Amy McLaughlin, MS, MA, CETL, CISM, CHPS, CDPSE, CISSP, amclaughlin@cosn.org.
CoSN staff contact: Jill Brown, MA, Ph.D., Director of Professional Learning, jbrown@cosn.org
New Release!! 2025 Cybersecurity Legislation Report
In 2025, school districts continue to face increasingly complex and costly cybersecurity challenges—yet most remain under-resourced and underprepared. As this report shows, while federal support is shrinking, several states are advancing innovative, bipartisan legislation to help safeguard student data, improve incident response, expand insurance access, and build the cybersecurity workforce we urgently need.
This report highlights the legislative activity in Arkansas, Massachusetts, Oregon, Pennsylvania, and Texas—not just to inform, but to inspire. These states represent a range of governance models and policy contexts, yet their common strategies offer actionable ideas for state and district leaders across the country. Our goal is to equip the education community with insights that move us from reactive to resilient.
Cybersecurity Readiness
With cybersecurity threats to schools continuing to escalate and existing standards often too complex or costly for K–12 environments, CoSN is stepping forward to lead the next phase of the Cybersecurity Rubric (CR). Originally developed by ClassLink and a coalition of education organizations through the Cybersecurity Coalition for Education (CC4E), the Rubric provided a much-needed, practical framework tailored specifically to schools. As part of this initiative, the CoSN Cybersecurity Readiness for Education (CCRE) was established to assess a district's cybersecurity posture using the Rubric's standards. CoSN is grateful for the strong foundation they established and is now ready to scale this work, expand supports for districts, and strengthen cybersecurity readiness across K–12 education nationwide.
Cybersecurity Readiness for Education (CCRE) Practitioner
Improving cybersecurity in schools is a significant challenge, and one of the biggest obstacles is the cost of hiring external cybersecurity experts. That’s why a group of education technology partners collaborated to create a solution: an online training program designed to help schools cultivate their own internal experts.
The CCRE is designed for EdTech leaders, IT professionals, and consultants seeking to master the CoSN Cybersecurity Rubric. Our training resources prepare you to apply the Rubric effectively and prepare for the exam if you choose to take it. Individuals of all cybersecurity skill levels are welcome and encouraged to apply.
2025 CIS MS-ISAC K-12 Cybersecurity Report: Where Education Meets Community Resilience
The Center for Internet Security, in partnership with CoSN, has released an 18-month, retrospective study of cyber threat trends and defensive impact in K-12 education. This report examines how K-12 organizations are responding to these challenges through collaboration, preparation, and a deep understanding that cybersecurity in education is fundamentally about protecting people, not just technology. Access the report by clicking here.
Don Ringelestein, CETL, CISSP, CISM, CAPM, ITILv4, Executive Director of Technology at Yorkville CUSD 115.
Addressing Cybersecurity in K-12 Organizations: Your Cybersecurity Toolkit
1. Planning
The Foundation of effective cybersecurity practices is planning.
2. Preventation & Preparation
Preparation is key to preventing attacks and protecting your organizational systems.
3. Implementation
Implementation of your cybersecurity program requires a systematic approach. These resources can streamline the process.
4. Response
Preparedness is what separates a botched response from a secure one.
K-12CVAT: K-12 Community Vendor Assessment Tool Lite-V4.1
The K-12CVAT, based off the Educause Higher Education Community Vendor Assessment Tool – Lite (HECVAT-Lite), but geared specifically towards K-12 education.
CoSN Cybersecurity Professional Development Opportunities
- Cybersecurity in K-12 Schools Facilitated Online Course
- Cyber Resilience Blueprint: Building Your District’s Security & Incident Response Plans Facilitated Online Workshop
- Practice the Chaos: Planning & Leading Effective IR Tabletops Facilitated Online Workshop
- Business Continuity Planning: Disaster Preparedness Facilitated Online Workshop
- Cybersecurity Incident Response Tabletop Event
- Unlocking Value of Investment (VOI) and Total Cost of Ownership (TCO) for EdTech Leaders Facilitated Online Workshop
- CoSN also offers affordable customized courses and in-house professional development options for schools or districts. We can provide nationally recognized subject matter expert instructors or fully developed courses for you to facilitate with in-house experts in our LMS.
K-12 Cybersecurity Advisory Committee
CoSN’s EdTech Leadership Survey consistently identifies cybersecurity as a top priority for school system IT Leaders. The CoSN Cybersecurity advisory seeks to support school leaders in their efforts to support school system leaders, including technology leaders, to protect their networks and provide information security, analyze their current status, and validate what they are doing well. Members of the committee share their knowledge and expertise in a number of ways including contributing to ongoing conversations and creation of CoSN resources as well as identifying districts who might serve as exemplars for their work. The group meets monthly for a one-hour meeting with some occasional time for subgroup discussions or input asynchronously. The committee meets remotely once a month for an hour.
K-12 Cybersecurity Readiness Committee
The Cybersecurity Readiness Thought Leadership Committee provides strategic leadership for CoSN's Cybersecurity Readiness for Education (CCRE) initiative by guiding the continued advancement of the Cybersecurity Readiness Framework, Rubric, and related resources; building national capacity by equipping practitioners with practical guidance, implementation resources, and effective practices; promoting measurable organizational improvement; and advancing cybersecurity readiness across the K–12 education ecosystem.
Through collaboration, the committee guides the continued refinement of the Cybersecurity Readiness Framework, Rubric, and related resources to ensure they remain practical, relevant, and aligned with the evolving needs of K–12 school systems while supporting sustainable cybersecurity capability and organizational resilience.
Extend Your Learning
CoSN offers ongoing professional development opportunities focused on Cybersecurity for you and your team. These opportunities are open to all, CoSN members enjoy exclusive discounts.
- Cybersecurity Online Courses
- Workshops
- Tabletop Exercises
- Webinars
- Podcasts
Thanks to Our Initiative Sponsors
Thanks to Our Strategic Partner
