K-12 Cybersecurity Initiative
Overview
What is the K-12 Cybersecurity Initiative?
To counter the rising surge of ransomware and malicious activity affecting local educational agencies (LEAs) around the state, the °ÄÃÅ×î¿ì¿ª½±Ö±²¥ (°ÄÃÅ×î¿ì¿ª½±Ö±²¥) submitted an exceptional item request for funding to the Texas Legislature to provide cybersecurity resources to LEAs. ÌýWe are pleased to announce that our request has been approved, and we will be able to distribute in-kind services with these funds between September 1, 2023 and August 31, 2025.
The purpose of this initiative is to provide immediate solutions to protect LEAs from major cyber incidents, such as ransomware. Priority will be given to rural LEAs, and cybersecurity practitioners will be available at your regional education service center to assist with implementation of cybersecurity controls that fall within scope of this initiative.Ìý
The following cybersecurity controls are highly encouraged for all LEAs to implement betweenÌýSeptember 1, 2023 and August 31, 2025 and fall within the scope of this initiative:
- Implement fully managed Endpoint Detection and Response (EDR) on LEA servers and applicable staff devices. °ÄÃÅ×î¿ì¿ª½±Ö±²¥ will fully fund licenses with limited distribution. See details below.
- Implement Multi-Factor Authentication (MFA) on staff email systems.Ìý
- Implement email protocol security configurations.Ìý
- Restrict local admin access.ÌýÌý
The following cybersecurity controls are funded on a first come first served basis by °ÄÃÅ×î¿ì¿ª½±Ö±²¥ through the Department of Information Resources (DIR) Shared Technology Services (STS) program and are recommended to mature LEA cybersecurity posture. These controls fall within scope of this initiative:Ìý
- Complete a third-party K-12 Cybersecurity Assessment to get a baseline of your cybersecurity maturity and action plan for improving cybersecurity posture.
- Implement Network Detection and Response (NDR), especially for schools with cameras and other Internet of Things (IoT) devices. (Currently pausing new customers into the NDR program as we evaluate capacity.)
The following cybersecurity controls are recommended to prioritize, but do not currently fall within scope of this initiative:Ìý
- Security Awareness Training for staff with access to network resources.
- Ensure backups are encrypted, stored off network, and tested regularly.
- Encryption of sensitive data
- Segment networks
- Third-Party Risk ManagementÌý
How much money was appropriated for the K-12 Cybersecurity Initiative?
The Texas State Legislature appropriated $55M to support the K-12 Cybersecurity Initiative.Ìý From the legislative entry into the budget:Ìý
- It is the intent of the Legislature that the °ÄÃÅ×î¿ì¿ª½±Ö±²¥ enters into an interagency agreement with the Department of Information Resources (DIR) to provide cybersecurity services for LEAs in accordance with DIR Strategy C.1.2, Security Services. Cybersecurity services to be provided by DIR may include but are not limited to, cybersecurity assessments, endpoint detection response, and network detection response.
Funded Service Type | Availability Scope | Next Step Timeline |
---|---|---|
Cybersecurity technical assistance provided by ESCs | Entire state | As offered per ESC |
Free third-party cybersecurity assessments | First come,Ìýfirst served | Request for service is now open! |
Free Endpoint Detection & Response (EDR) subscriptions through the end of 2024-25ÌýSY | Prioritized for small & midsize LEAsÌý | Request for service is now open! |
NDR phase 1 pilot program is now closed | Pilot group of LEAs and ESCs | Evaluate pilot participants to determine next steps |
Program Scope*
INTER-LOCAL AGREEMENT WITH DIR SHARED TECHNOLOGY SYSTEM (STS) REQUIRED
LEAs will need to sign DIR’s inter-local agreement to receive the in-scope services from DIR’s STS, Managed Security Services (MSS) program.ÌýOur goal is to have all eligible LEAs onboarded with a signed inter-local agreement by September 1, 2023, so the services can be distributed as soon as possible. After the inter-local agreement is in place, eligible LEAs may then request in scope services through the STS program, which will be paid for by °ÄÃÅ×î¿ì¿ª½±Ö±²¥ starting September 1, 2023 through August 31, 2025. The MSS vendor, AT&T, or your regional education service center may reach out to your LEA to help facilitate this process. Details about this process were discussed in theÌý.
LIMITED DISTRIBUTION OF EDR PER LEA ENROLLMENT
It is °ÄÃÅ×î¿ì¿ª½±Ö±²¥â€™s intention to focus on small and rural LEAs for the distribution of EDR services through DIR’s MSS. The EDR provided, which replaces traditional anti-virus software and incorporates threat intelligence along with malicious behavior characteristics on endpoints, will be fully managed to eliminate additional LEA overhead and is one of the best solutions to prevent ransomware and secure devices. The current vendors under the MSS contract for EDR are CrowdStrike and SentinelOne. To provide a scope that we can reasonably accommodate with the funding provided,Ìý°ÄÃÅ×î¿ì¿ª½±Ö±²¥ will limit the distribution for LEAs with a total enrollment of 50,000 and below, with a range from 30 licenses up to licenses equal to 30% of student enrollment, whichever is larger.ÌýÌýIt is °ÄÃÅ×î¿ì¿ª½±Ö±²¥â€™s intent toÌýfocus on high-risk and impact devices,Ìý²õ´ÇÌýinitial distribution should focus on servers and central office staff with any remaining licenses distributed to other staff devices that have access to sensitive data.
SECURITY ASSESSMENTS BASED ON SAMPLING OF LEAs BY SIZE
Security assessments will also be available to LEAs as part of this initiative and will also be provided by AT&T through DIR’s services catalog.Ìý The intent of these assessments is to provide a high-level look at the overall state of cybersecurity in Texas’ K-12 public entities. °ÄÃÅ×î¿ì¿ª½±Ö±²¥ will not receive detailed copies of reports for any individual LEA.ÌýÌýScope of and availability of the assessments will be based on a sampling of LEAs by size.Ìý Once those assessments are set up in the STS program, we will provide guidance to interested parties on how to request those assessments through the STS program.
*The program scope is subject to change in order to achieve initiative goals. Initiative implementation details are still in development. °ÄÃÅ×î¿ì¿ª½±Ö±²¥ will provide updates through Cybersecurity Coordinator Forum webinars and this site.
Next Steps:Ìý
- Ensure your LEA has signed a and submit the form to Texas Department of Information Resources (DIR), in order to start the process for onboarding to the Shared Technology Services Program (STS), Managed Security Services (MSS). There is no cost to sign up for the program. This is the first step to enable your LEA to receive the services through the programs that are funded by the °ÄÃÅ×î¿ì¿ª½±Ö±²¥.
- Log in to the STS portalÌýto request your free procurement of EDR through DIR's contracted MSSÌýprovider, AT&T. Current offerings include either Crowdstrike or SentinelOne.
- Refer to the TX K12 Cybersecurity Assessment Quick Start Guide for details on how to request a Cybersecurity Assessment for your district.
- Register for to remain up-to-date on the latest offerings of the K-12 Cybersecurity Initiative.
Resources
Webinars & Slide Decks
You may register for the using your LEA email address.Ìý
-
- Webinar Slide Deck — April 2023Ìý(±Ê¶Ù¹ó)
-
- Webinar Slide Deck — May 2023Ìý(±Ê¶Ù¹ó)
-
- Webinar Slide Deck — June 2023Ìý(±Ê¶Ù¹ó)
-
- Webinar Slide Deck — August 2023Ìý(±Ê¶Ù¹ó)
-
- Webinar Slide Deck - AprilÌý2024 (PDF)
Other Resources
- K-12 Cybersecurity TAAÌý- June
- K-12 Cybersecurity TAAÌý - SeptemberÌý
- STS New Customer FormÌý(DIR inter-local agreement)Ìý
- FAQs
Ìý
Ìý
For more information contact:
Texas Department of Information Resources CISO Office at DIRSecurity@dir.texas.gov
°ÄÃÅ×î¿ì¿ª½±Ö±²¥ Cybersecurity team Cybersecurity@tea.texas.gov