A teacher sets up individual blog sites for each student in a middle school class, and provides the same password to each student. What steps would you take to move this from bad practice to emphasizing cyber safety?

Read More

Your secured shred bin is full so a staff member leaves a box of confidential student data next to the shred bin (student records, IEPs, etc.) The paper is then disposed of in the garbage dumpster and the paper documents are found when they spill out of the dumpster. How do you handle this type of security incident?a

Read More

Your organization’s facilities team breaks the door to enter your data center after hours in response to an HVAC leak. What steps would you take to respond to this incident?

Read More

What steps should you take when you encounter ransomware on a system or device?

Read More

When you are conducting a ransomware investigation, why would you need to know if your the ransomware group is on OFAC – Office of Foreign Asset Control list of criminal organizations? Where would you find this information?

Read More

Are you actively monitoring systems for security incidents? Do you know what systems and accounts you are monitoring and why?

Read More

Do you have a plan when an alert is triggered on a computing system or account you are monitoring?

Read More

Do you have a map(s) of your technical environment to use when you have an incident? Where would you find this map?

Read More

Do you know what is on your network? Who is on your network? Can you find this out when you need it? Do you know how to take action on the information?

Read More

What do you do when you find possible illegal activity on your network or systems? What is your process for working with law enforcement? Is your process different if the person involved in the activity is a student?

Read More