Cyber Security Assessment/Audit and Implementation for K-12 Schools

The process begins with evaluating the K12 organization’s “as-is” IT system to benchmark against information security standards and best practices and provide an action plan to remediate gaps for the organization for better information security management.

High-level objectives of the audit:

• Identifying gaps as part of internal control evaluation
• Benchmarking gaps against information security standards and cyber security best practices along with state and federal guidelines
• Grouping the gaps identified and providing recommendations to minimize incidents with control recommendations.

The audit will be approached with the security benchmark standard NIST 800-53R5, ISO27001, AR, and existing school policies. The identified gaps will be scored by significance to facilitate prioritization of remediation actions.