4. Organizational and Third-Party Access Control and Compliance as well as Training Seminar
In this session, the OhCR team and you will examine the journey to NIST Cybersecurity Compliance to meet your contractual obligations and Board policies. Our training will focus on Access Control in your School District that protects student, teacher, and staff data using processes, and decision-making exercises. Are you trying to protect everything but risking critical data? The OhCR and you will learn to identify the critical data and those who access it, to reduce your attack surface. Together, the OhCR and you will expand into the Cloud space and supply chain to assure that your vendors are also compliant. You will finish the seminar with a robust look at the districtwide Cyber Security Awareness training program.
 NIST and Data Security Training and your Policies
 Access Control Process Template and Exercise
 Identify Critical Staff for Access Control Exercise
 Supplier Control Process
 Vendor Data Privacy Control Make and Take
 Security Awareness Training Exercise

5. Network Configuration and Maintenance Control Seminar
In this session, you improve your inventory control by identifying assets as critical and non-critical. You and your team will work with School District leaders to create your data flows to identify all PII, PHI and PFI storage, locally and on the cloud. The OhCR, you and your team will build system design and maintenance skills to promote data security and efficiency. You will finish the seminar with a plan to sustain your Cybersecurity Framework.
 Identify Asset Inventory and Categorization Exercise
 How to Make a Data Flow Exercise
 Business Critical and Non-Critical Systems Exercise
 Developing Organizational Standards for Systems Architecture
 Information Technology System Maintenance Plan
 A CSF Sustainment Plan that Works.

Introduction:

Incident Response Planning is an important part of successful security planning. Incident Response Plans establish and test clear measures that your school district will practice and follow to reduce the impact of a security breach. An Incident Response Plan is a concrete plan, with identified roles and responsibilities, lines of communication and established procedures of response.

Having an Incident Response Plan and using it during Tabletop or Sandtable exercises to proactively practice in your district are important elements identified throughout the NIST framework. School districts may also have local Board policy identifying the need for incident response plans, disaster recovery, or business continuity planning.