[Mail_treas] Last Call - Cyber Security Framework - Cohort Program

[Thor Sage]

Good afternoon,
We have a number of districts that have expressed interest in the CSF Security Cohort Program, but have not confirmed that they will participate.  At this time, we need to firm up our list of participants so that sessions can begin after the first of the year.  For any district that would like to participate, please process a PO to MVECA in the amount of $5000 for the one-time cost of this year-long program and send it to me by December 11th.   If you have any additional questions about the program, please let me know what those are.  Please see attached.  Here are a few additional details:

  1.  The cohort sessions will be held via web conference over the course of a year.
  2.  Participants should expect to spend 25 to 30 hours over the next year participating (twice monthly) in meetings in which you will accomplish control implementation, policy customization, incident response plan testing, and business continuity planning.
  3.  More than one participant per district is permitted at no additional cost.
Again, please let me know what remaining questions you may have.
Thank you,
Thor


Thor Sage
Executive Director
Miami Valley Educational Computer Association
937-767-1468  x3101
[http://www.mveca.org/images/logo.gif]<http://www.mveca.org/>       [i] <https://www.linkedin.com/company/mveca/>
Not-for-profit Technology Services for Education and Local Governments


From: Thor Sage
Sent: Monday, November 11, 2024 3:34 PM
To: Thor Sage <sage at mveca.org>
Subject: Cyber Security Framework - Cohort Program

Good afternoon,
We are trying to gauge interest in a Cybersecurity Framework program that would include a full year of engagement between school district contacts, our contracted MCOECN Chief Information Security Officer, the non-profit organization Filament Essential Services (FES), and others that would help each district develop comprehensive security policies and procedures.  By adopting an industry standard cybersecurity framework, districts can qualify under the safe harbor provision of Chapter 1354 of the Ohio Revised Code which shields organizations from civil lawsuits related to data breaches (https://codes.ohio.gov/ohio-revised-code/chapter-1354).  Additionally, adopting a cybersecurity framework can help add definition and protections to your various security initiatives.  If we can get a minimum of five districts to participate, we can reduce the cost of this program down to $5000 per district.  There is a maximum of 12 districts per cohort.
If you are interested, please contact me directly so we can begin planning.  We have not yet established dates for this activity, but will do so as soon as we can establish that we have a minimum level of participation.  See below and attached for additional information on the CSF Cohort Program.
Thank you,
Thor

The CSF Cohort is a comprehensive security program designed to enhance the cybersecurity resilience of Ohio school districts. This program begins with an Initial Gap Assessment where the school district's security posture is evaluated against the NIST Cyber Security Framework, ensuring alignment with industry standards. By identifying and prioritizing risks to sensitive customer data and IT infrastructure, the program delivers a detailed report outlining gaps and providing actionable recommendations. A prioritized Plan of Action and Milestones (POAM) is then developed to address these vulnerabilities systematically. The Cohort also includes Control Deep Dive Sessions where expert guidance and hands-on training are provided, allowing the school district's team to manage and remediate security gaps effectively. These sessions are customized to address the unique challenges of each school district, ensuring relevant and actionable support. Additionally, the program features Incident Response Planning and Business Continuity Planning Workshops, equipping the district with robust strategies to swiftly address and recover from security breaches while maintaining critical operations. Through this tailored approach, the CSF Cohort empowers school districts to build a strong and resilient cybersecurity foundation.

Thor Sage
Executive Director
Miami Valley Educational Computer Association
937-767-1468  x3101
[http://www.mveca.org/images/logo.gif]<http://www.mveca.org/>       [i] <https://www.linkedin.com/company/mveca/>
Not-for-profit Technology Services for Education and Local Governments


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://listserv.mveca.org/pipermail/mail_treas/attachments/20241205/d0c39f8a/attachment-0001.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image001.jpg
Type: image/jpeg
Size: 3184 bytes
Desc: image001.jpg
URL: <http://listserv.mveca.org/pipermail/mail_treas/attachments/20241205/d0c39f8a/attachment-0002.jpg>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image002.jpg
Type: image/jpeg
Size: 1229 bytes
Desc: image002.jpg
URL: <http://listserv.mveca.org/pipermail/mail_treas/attachments/20241205/d0c39f8a/attachment-0003.jpg>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: CSF Security Cohort Program - Security Framework Timeline.pdf
Type: application/pdf
Size: 384008 bytes
Desc: CSF Security Cohort Program - Security Framework Timeline.pdf
URL: <http://listserv.mveca.org/pipermail/mail_treas/attachments/20241205/d0c39f8a/attachment-0001.pdf>