Governance

4. Organizational and Third-Party Access Control and Compliance as well as Training Seminar
In this session, the OhCR team and you will examine the journey to NIST Cybersecurity Compliance to meet your contractual obligations and Board policies. Our training will focus on Access Control in your School District that protects student, teacher, and staff data using processes, and decision-making exercises. Are you trying to protect everything but risking critical data? The OhCR and you will learn to identify the critical data and those who access it, to reduce your attack surface. Together, the OhCR and you will expand into the Cloud space and supply chain to assure that your vendors are also compliant. You will finish the seminar with a robust look at the districtwide Cyber Security Awareness training program.
 NIST and Data Security Training and your Policies
 Access Control Process Template and Exercise
 Identify Critical Staff for Access Control Exercise
 Supplier Control Process
 Vendor Data Privacy Control Make and Take
 Security Awareness Training Exercise

5. Network Configuration and Maintenance Control Seminar
In this session, you improve your inventory control by identifying assets as critical and non-critical. You and your team will work with School District leaders to create your data flows to identify all PII, PHI and PFI storage, locally and on the cloud. The OhCR, you and your team will build system design and maintenance skills to promote data security and efficiency. You will finish the seminar with a plan to sustain your Cybersecurity Framework.
 Identify Asset Inventory and Categorization Exercise
 How to Make a Data Flow Exercise
 Business Critical and Non-Critical Systems Exercise
 Developing Organizational Standards for Systems Architecture
 Information Technology System Maintenance Plan
 A CSF Sustainment Plan that Works.