I am participating in (and blogging during) an online presentation from Steve Miller and Chris Seiberling who are describing a project from CoSN called “Cyber Security For The Digital District.” The Web site has some really interesting resources for technology leaders who are trying to move their organizations forward with respect security issues. Of particular interest to me is their Cyber Security Checklist which attempts to provide a basic analysis of your school district’s security situation and the Security Planning Grid which is a rubric that can be used for a self-assessment.

The presenters have found, not surprisingly, that most school districts are not adequately prepared for security problems. They emphasize the importance of comprehensive security planning and annual testing of that plan in simulated crises. This is great information and a handy site if you need help getting your superintendent’s attention about security concerns. Frankly, I’m surprised there aren’t more security problems at schools. It is so easy to access key systems and data through social engineering and other low-tech methods. I’ve said it before, and it bears repeating, that security is as much a personnel problem as it is a technical one. Kevin Mitnick had pretty much the same message in a recent presentation.

Update: I should mention that this online presentation was sponsored by the School Technology Leadership Initiative. Good stuff.