Zero Breach Zone

Welcome to the "Zero Breach Zone," where we delve into the vital mission of fortifying K-12 schools against breaches and phishing threats. Hosts Andy Lombardo and Phil Hintz lead insightful conversations with top experts in cybersecurity, education, and technology, uncovering strategies to protect our schools. From breaking down the latest digital threats to sharing actionable security measures, this podcast empowers educators, administrators, and parents with the tools they need to safeguard students and staff in today’s connected world.

Knowing Is Half the Battle... The Other Half Is Cybersecurity Funding for Schools (Re-Air)

Welcome to episode 15 of the Zero Breach Zone podcast, where hosts Phil Hintz and Andy Lombardo discuss their experiences at recent conferences, focusing on cybersecurity strategies in K-12 education. They explore the importance of multi-factor authentication (MFA), the challenges of session timeouts, and the need for continuous improvement in cybersecurity practices. The conversation also highlights the significance of tabletop exercises for incident response and the convergence of physical and cybersecurity measures in schools. The hosts share insights on integrating technology for safety and the necessity of collaboration among various stakeholders. In this conversation, Andy Lombardo and Phil Hintz discuss various aspects of school security, including the importance of enhancing physical security measures, leveraging CISA for audits, and the role of AI in education. They emphasize the need for collaboration and networking within the EdTech community, as well as advocating for increased cybersecurity funding to protect K-12 institutions. The discussion ends with highlighting the significance of engaging with Congress to address these pressing issues and the helpful resources prepared by CoSN to do so.Key Takeaways:MFA is essential but requires ongoing adjustments & MFA should extend to social media accountsSession timeouts can pose risks if not managed properlyTabletop exercises help prepare for incidentsConvergence of physical and cyber security is crucialStakeholder collaboration is key in incident responseContinuous learning from conferences is invaluableK-12 cybersecurity threats are rising and we need your voiceCybersecurity is a bipartisan issue with real-world consequencesParting Tool: Help your district to become a Zero Breach Zone -Urge Congress to Protect and Invest in Cybersecurity Support for Schools-  through the CoSN prepared resources:https://cosn.quorum.us/campaign/115693/ Resources Mentioned Evil Jinx: https://github.com/kgretzky/evilginx2Chapters00:00 Spring Reflections and Conference Recap03:08 Cybersecurity Strategies and MFA Insights06:01 Real-World Cybersecurity Challenges09:06 Tabletop Exercises and Incident Response12:00 Convergence of Physical and Cybersecurity14:57 Integrating Technology for Safety19:12 Enhancing School Security Measures20:50 Leveraging CISA for Security Audits22:34 Insights from K-12 Conferences23:32 AI in Education: Opportunities and Challenges26:33 Networking and Collaboration in EdTech31:46 Advocating for Cybersecurity Funding39:21 Call to Action: Engage with Congress

12-02
36:33

Ransomware Rising: Confronting the K-12 Cybersecurity Crisis (Re-Air)

Welcome to episode 14 of the Zero Breach Zone, in this episode hosts Phil Hintz and Andy Lombardo dive into the current state of K-12 cybersecurity, analyzing key findings from the Cisco Talos 2024 report. They explore the concerning rise in ransomware attacks targeting educational institutions, the struggles schools face with limited security budgets, and practical strategies for strengthening cyber defenses. The conversation covers the critical importance of regular system monitoring, vulnerability patching, and addressing MFA weaknesses that leave schools exposed. Phil and Andy emphasize that human factors remain one of the biggest security challenges, highlighting how effective security awareness training can significantly reduce risk when implemented thoughtfully. The discussion also examines the growing relevance of zero trust architecture and how phishing attacks continue to be cybercriminals' preferred entry point to school systems. Throughout the episode, they stress that despite being perceived as low-value targets, K-12 schools are increasingly in cybercriminals' crosshairs, making collaboration among education cybersecurity professionals more important than ever.Key Takeaways:K-12 education is increasingly targeted by cybercriminals despite being perceived as low-valueEducational institutions now lead in ransomware attacks, with incidents peaking during school breaksBudget constraints severely limit cybersecurity initiatives in schoolsFundamental security practices are critical: regular monitoring, patching systems, and addressing MFA vulnerabilitiesSecurity awareness training delivers strong ROI when implemented effectivelyEmail security and phishing prevention remain essential first-line defensesCreating a culture of cyber awareness among all staff is fundamental to protectionZero trust architecture and data-driven security decisions are becoming increasingly importantCollaboration among education cybersecurity professionals is vital for improving collective defenseProactive measures and basic cyber hygiene significantly reduce exposure to attacksResources Mentioned:- Cisco Talos 2024 Cybersecurity Report- CyberNut Security Awareness Training for K-12- cosn.quorum.us/campaign/115693/- Parting Tool: Rust Desk as a fee alternative to TeamViewer on Andy's Blog EdTechIrl  (@edtechirl on substack)Chapters00:00 Introduction to K-12 Cybersecurity02:49 Insights from Cisco Talos 2024 Report06:04 Understanding the Target: K-12 Education08:56 Challenges in Cybersecurity Funding11:57 The Importance of Regular Monitoring and Patching15:02 Security Awareness and Human Factors in Cybersecurity20:19 Navigating Email Security Challenges23:22 Building a Culture of Cyber Awareness25:14 Understanding Spoofing and Phishing Attacks27:31 Ransomware Trends and Threats30:12 The Rise of Ransomware as a Service39:56 Proactive Measures Against Ransomware43:35 Remote Access Solutions for Security

11-18
41:39

Building Strong EdTech Partnerships & Creating a Cybersecurity Culture in Schools with Jeff McCoy | FETC 2025 Series (Re-Air)

Welcome to episode 13 of the Zero Breach Zone! In this episode hosts Phil Hintz and Andy Lombardo speak with Jeff McCoy, Associate Superintendent for Academics in Greenville County, South Carolina. Drawing from his 25+ years in education, Jeff discusses the integration of technology in schools, emphasizing the distinction between vendors and solution partners. The conversation highlights cybersecurity as a shared responsibility across all departments, not just technology. Jeff stresses that security training should be continuous rather than annual, using short, clear communications. The discussion covers how data breaches often involve academic software, the importance of evaluating vendors' security practices, and the need for transparency with AI implementation in education. Jeff emphasizes that technology should ultimately enhance teaching and learning, requiring proper change management and cross-departmental collaboration. As this weeks Parting Tool, Jeff highlights the crucial role of 1EdTech, a global non-profit that develops open standards to reduce complexity, accelerate innovation, and expand educational possibilities worldwide.Key Takeaways:- Cybersecurity is a shared responsibility across all departments, not just technology- Distinguish between vendors (who sell products) and solution partners (who address needs)- Cybersecurity training should be continuous, using short, clear communications- Data breaches frequently involve academic software, not just administrative systems- Multi-factor authentication is essential for protecting school systems- Vendors must be evaluated for their cybersecurity practices and certifications- AI in education requires transparency about data usage and privacy- Technology should enhance teaching and learning, not complicate it- 1EdTech provides valuable resources for vetting educational appsResources Mentioned:- Multi-factor authentication solutions- Greenville County Schools' cybersecurity protocols- Educational technology evaluation frameworks- Parting Tool: 1EdTech for vetting educational applications

11-04
15:26

Energizing EdTech with Michelle Krieger: A Dynamic Conversation on School Cybersecurity | FETC 2025 Series (Re-Air)

Welcome to episode 12 of the Zero Breach Zone! Join hosts Phil Hintz and Andy Lombardo as they sit down with Michelle Krieger to explore topics top of mind at the intersection of education and cybersecurity recorded at FETC. In this energetic conversation, Michelle shares her unique journey from Special Education Teacher to Education Innovation to Data Protection Officer, to Director of Technology. Michelle offers valuable insights on the importance of data protection in increasingly digital learning environments. The discussion delves into crucial aspects of differentiating between Director of Technology and data protection officer roles. Everyone emphasizes the importance of "secure by design" principles, sharing examples of how schools can implement data privacy practices from the ground up rather than as afterthoughts. Drawing from her classroom experience, Michelle shares stories about working with students of all ages on online safety, from using a baking metaphor with elementary school kids to discussing deep fakes with high schoolers. Michelle's practical approach to making security concepts accessible to both educators and students resonated throughout the conversation, particularly when discussing the balance between technological innovation and responsible data stewardship. This episode is a must listen to all interested in edtech and cybersecurity!Key TakeawaysThe critical importance of data protection and cybersecurity in educational settings Challenges of implementing technology in schools while maintaining privacy Necessity of tailored cybersecurity training for educational staff and all school employees (from teachers to bus drivers)Proactive approaches to protecting student data and retention evaluationStrategies for engaging students in cybersecurity education from elementary to high schoolBuilding effective collaboration between educators and technology providers The evolving landscape of data privacy practices in educationResources Mentioned: Secure by Design & SISData Guard by ClassLink Antoinette King's book, The Digital Citizen's Guide to CybersecurityThe Cybersecurity RubricParting Tool: Explaining to your Superintendent or School Board the difference between the role of Director of Technology & Data Protection Officer 

10-21
31:19

From Crisis to Innovation: Lessons in Educational Cybersecurity with Scott Bailey | FETC 2025 Series (Re-Air)

Welcome to episode 11 of the Zero Breach Zone! Join us for an enlightening conversation with  Scott Bailey, former superintendent and educational innovator from Desert Sands School District. Through his engaging storytelling, Bailey shares candid experiences from his work across Nevada's largest school districts, including Clark County School District with 314,000 students and Washoe County School District serving the Reno-Tahoe area. His firsthand account of managing the initial COVID-19 outbreak and spearheading the rapid transition to online learning provides valuable insights into crisis management at scale. Drawing from his extensive background in education leadership, Bailey addresses the evolving landscape of digital security in schools with a refreshing mix of wisdom and practical experience. His approach to balancing technological advancement with student safety, coupled with his deep understanding of crisis response planning, demonstrates why he's become a respected voice in educational cybersecurity. Through real-world examples and lessons learned, his emphasis on the crucial partnership between educational leaders and technology officers provides a blueprint for creating secure, innovative learning environments.Key TakeawaysThe fundamental importance of student connectivity for educational equityEssential elements of cybersecurity implementation in educational settingsBuilding effective crisis response strategies through proactive planningDeveloping comprehensive security frameworks that address both physical and cyber threatsThe critical role of relationship-building in addressing cybersecurity challengesImplementing effective tabletop exercises for cybersecurity scenariosStrategic approaches to protecting student data privacyCreating sustainable innovative practices while maintaining securityThe importance of holistic safety planning in educational environmentsMethods for assessing and improving institutional cybersecurity postureStrategies for effective communication during security incidentsBalancing technological advancement with security requirementsResources MentionedEducational Institution Crisis Response FrameworkStudent Data Privacy Compliance ResourcesDigital Equity Implementation ToolkitCybersecurity Assessment Guidelines for SchoolsParting Tool: TriVigil Security Assessment Platform for Education#EdTech #Cybersecurity #EducationalLeadership #SchoolSafety #DigitalEquity #StudentPrivacy #CrisisResponse #SecurityPlanning 

10-07
28:45

Building a Culture of Cybersecurity in K-12 with Itza White, Director of Cybersecurity at Five Star

Welcome to episode 21 of Zero Breach Zone! In this hosts Andy Lombardo and Phil Hintz welcome Itza White, the Director of Cybersecurity for Five Star. The group discusses the unique challenges of cybersecurity in K-12 education, the importance of documentation, and building a culture of security awareness. Itza shares her journey into cybersecurity, two big challenges schools face including the rising significance of cyber insurance, and the need for effective incident response plans. The conversation also highlights the importance of empowering women and girls in technology and the resources available for schools to enhance their cybersecurity posture.   Key Takeaways Cybersecurity in K-12 requires special considerations. Documentation is crucial for effective cybersecurity practices. Everyone in a school is part of the security team. Cyber insurance requirements are constantly evolving. Building a culture of security awareness is essential. Training can often be done at low cost. Incident response plans should be tested regularly. Partnerships with cybersecurity firms can provide valuable resources. Empowering women in technology is important for the industry's development.Resources Mentioned Parting Tool: Five Star's Cyber Incident's Readiness Check - a free 20 questions tool for assessing cybersecurity readiness

09-23
24:49

When Disruption Disrupts Itself: Dr. Joe Phillips on AI, Safety, & the Accelerating Pace of EdTech | FETC 2025 Series (Re-Air)

Welcome to episode 10 of Zero Breach Zone! Join us for our continued FETC 2025 coverage featuring Dr. Joe Phillips, CTO of Fulton County Schools. In this insightful conversation recorded live at the conference, Dr. Phillips draws from his unique background in both education and military service to address the complex challenges facing large school districts. Beyond introducing his innovative PLANT AI model, he shares a compelling perspective on how Moore's Law has given way to an era where technological disruption is actually accelerating the pace of disruption itself. His deep understanding of AI's transformative potential, coupled with his measured approach to implementation, showcases why he's become a leading voice in educational AI awareness. As the host of the newly launched 'Safe and Innovative Schools' podcast, Dr. Phillips brings a fresh perspective on balancing innovation with security in modern educational environments.Key Takeaways The distinctive challenges of implementing innovation in large school districts Critical considerations for K-12 cybersecurity and data privacy Understanding and implementing the PLANT AI model for education How technological disruption is accelerating beyond Moore's Law predictionsStrategies for developing structured technology approval processes How AI can address resource limitations in education Benefits of a layered approach to school safety 'Swiss Cheese Appraoch'The importance of responsible AI awareness in education Evolution of data privacy agreements in the AI eraThe critical role of educational leaders in guiding AI integration Military insights applied to educational technology Practical implementation of innovative security measuresResources MentionedFETC Conference 2025 Resources PLANT AI Model by Joe Phillips 'Safe and Innovative Schools' Podcast by Joe Phillips K-12 Cybersecurity Framework Data Privacy Agreement Insights for App approvals - FERPA/ COBA Parting Tool: Microsoft Co-Pilot for use in K-12#FETC2025 #EdTech #Cybersecurity #Education #SchoolSafety #AI #TechDisruption #AIAwareness

09-09
30:49

E-Rate’s Future and Cybersecurity Funding for Schools with Mindy Fiscus

Welcome to episode 20 of Zero Breach Zone! Hosts Andy Lombardo and Phil Hintz sit down with Mindy Fiscus, a 25+ year veteran in the world of education technology and the Director of Government Affairs & E-Rate at the Learning Technology Center of Illinois. Mindy brings a wealth of experience and passion to the conversation, sharing her journey through the evolving EdTech landscape and the pivotal role that E-Rate has played in connecting classrooms across the country.Together, they unpack the future of E-Rate amidst legal challenges, the urgent need for cybersecurity funding in K-12 schools, and how Illinois has emerged as a leader in the federal cybersecurity pilot program. Beyond funding and policy, Mindy emphasizes the power of collaboration within the EdTech community, the growing movement to empower women in IT, and the critical importance of advocacy to ensure schools have the resources needed to protect students and advance learning.Whether you’re an IT professional, school leader, or advocate for equitable access to technology, this episode offers both inspiration and practical tips for navigating the E-Rate process, engaging your community, and shaping the future of education technology.Key Takeaways:• Mindy Fiscus brings over 25 years of expertise in EdTech and advocacy• E-Rate remains essential for building and sustaining classroom connectivity• Cybersecurity funding is now a top priority for K-12 schools• Illinois leads in projects under the new cybersecurity pilot program• Collaboration among educators, IT leaders, and policymakers drives success• Women in IT are advancing through networking and empowerment initiatives• Advocacy is vital to secure resources and expand E-Rate opportunities• E-Rate consultants and resources can help schools maximize funding• Understanding the history of E-Rate strengthens future applications• Community engagement is key to effective EdTech implementationResources Mentioned:• Learning Technology Center of Illinois (LTC)• E-Rate Program Documentation & Resources (see parting tools)• Parting Tool 1: E-Rate Central provides a comprehensive range of information and consulting services about the E-Rate program and E-Rate funding opportunities• Parting Tool 2: Funds For Learning helps you navigate the E-rate funding process, & provides articles + support Chapters:00:00 – Introduction to the Zero Breach Zone Podcast06:05 – The Cybersecurity Pilot Program12:09 – E-Rate Legitimacy and Future Concerns20:11 – Ensuring Student Safety in Technology Integration26:55 – Empowering Women in Technology34:39 – E-Rate Insights and Resources

08-26
38:03

Policy, Passion & Purpose: Tales from EdTech Trailblazer Dr. Sheryl Abshire | FETC 2025 Series (Re-Air)

Welcome to episode 9 of Zero Breach Zone! Put on your spurs and join us for our first episode in our special FETC 2025 series! Hosts Andy & Phil kick off our conference coverage with master storyteller Dr. Sheryl R. Abshire, a 40+ year education technology pioneer whose deep understanding of policy and government has shaped educational technology across the nation. Her compelling narratives and unique perspectives come from a remarkable journey that spans from implementing the first Apple II computers to leading cybersecurity initiatives as CTO of Calcasieu Parish School System. Through years of advocating at state and federal levels, Dr. Abshire has developed an unparalleled understanding of educational technology policy and its real-world impact on schools. Her diverse experience - including classroom teaching, school administration, successful grant writing, and technology leadership - combined with her gift for storytelling, provides invaluable insights into how passionate educators can shape the future of technology in schools. As co-author of "The Savvy Ed Tech Leader" and one of the original pioneers of the E-Rate program's first year, Dr. Abshire demonstrates how dedication to lifelong learning and proactive leadership can transform educational technology.Key Takeaways:• Tracing the evolution of educational technology from Apple II computers to AI integration• How E-Rate's first year implementation transformed internet access in schools and what E-Rate is up against today • The importance of understanding how technology has been integrated across all curriculum areas• Critical cybersecurity considerations for modern educational institutions• Insights from serving as both educator and technology leader• The continuing importance of professional development and certification (ISTE, CCRE)• Practical wisdom for aspiring education technology leaders fr her book The Savvy Ed Tech Leader• The role of mentorship in developing future EdTech leaders• The recent PowerSchool Breach and its implications • Balancing innovation with security in today's educational environmentResources Mentioned:• "The Savvy Ed Tech Leader" by Dr. Sheryl R. Abshire and co-authors• FETC Conference 2025 Resources• E-Rate Program Documentation• Cybersecurity Rubric Evaluation Framework• ISTE Certification Program• The Cybersecurity Rubric#FETC2025 #EdTech #Cybersecurity #Education #SavvyEdTechLeader

08-11
30:47

Duane Shaffer: Strengthening K–12 Cybersecurity Through Documentation, Community & the TLE Seal

Welcome to Episode 19 of Zero Breach Zone. In this episode, hosts Andy & Phil  interview Duane Shaffer, the director of technology services at the Learning Technology Center of Illinois. They discuss the importance of cybersecurity and data privacy in K-12 education, the vision behind the IT summit, and the role of documentation in enhancing cybersecurity practices. Duane shares insights on the Trusted Learning Environment SEAL program and emphasizes the significance of community collaboration among school districts. The conversation concludes with practical tips for technology directors.Key Takeaways:The summit aims to bring IT professionals together for networking and learningCybersecurity and data privacy are critical focuses for K-12 educationDocumentation is essential for effective cybersecurity practices The Trusted Learning Environment TLE Seal & Mini Seal program helps districts improve data privacy, and build robust cybersecurity infrastructure Positive reinforcement of the TLE Seal & Mini Seal program by CoSN helps validate districts and create good buzz and visibility  Collaboration among districts enhances resource sharing and problem-solving Creating a culture of intentional effort in cybersecurity is vital through conferences The cohort model fosters community and shared learning experiences.Parting Tool: Duane recommends using Google's Notebook LM to streamline policy or management of any long complex documentation, you can simply search your question and it acts as a personal guidebookChapters:00:00 Welcome to the Zero Breach Zone05:03 Focus on Cybersecurity and Data Privacy11:08 The Importance of Documentation17:10 Parting Tips and Tools for IT Directors

07-29
20:46

The Cybersecurity Mindset in K–12: Insights from Maurice Payne

Welcome to Episode 18 of Zero Breach Zone. Hosts Phil Hintz and Andy Lombardo sit down with Maurice Payne, Director of IT for Decatur Public Schools, to talk about his journey from corporate America to K–12 EdTech.Maurice shares his approach to leading technology in a school district, what excites him most about tackling cybersecurity challenges, and why moving toward NIST standards is critical for accountability and continuous improvement. He also reflects on his time in the CTO Academy and the powerful mentorship he received from EdTech leaders Sheryl Abshire and Frankie Jackson (both past podcast guests).Whether you’re an IT leader, educator, or EdTech partner, this episode is packed with insights on building secure, future-ready schools.Key Takeaways:Maurice Payne’s transition from corporate IT to K–12 EdTech leadershipHis approach to the role and key cybersecurity prioritiesLessons from the CTO Academy and mentorship from Sheryl Abshire & Frankie JacksonWhy NIST standards matter for accountability and improvementBreaking cybersecurity into manageable stepsE-rate funding’s role in advancing EdTechBuilding networks and driving continuous improvementThe importance of governance, documentation, and staff buy-inParting Tool: Always remember the power of networking and stepping outside your comfort zone—whether it’s within your district or at a conference. Learning from peers and building support networks is essential for growthChapters:00:00 Introduction to EdTech and Jennifer Womble03:01 Jennifer's Journey in Education06:09 The Evolution of FETC09:02 Building a National EdTech Community11:56 Cybersecurity in Education14:58 Creating a Collaborative Learning Environment18:00 Intentionality in Conference Design21:04 Engaging Students in Cybersecurity Awareness23:31 The Importance of Cybersecurity Education24:54 Engaging Students in Cybersecurity26:56 Understanding Cyber Threats28:43 Data Privacy and Student Awareness30:07 Innovative Tools for Educators32:42 Experiential Learning in VR37:21 FETC Insights and Opportunities

07-15
23:32

FETC, VR & Cybersecurity: What’s Next for K–12 Tech? with Jennifer Womble

Welcome to Episode 17 of Zero Breach Zone, in this episode hosts Phil Hintz and Andy Lombardo are joined by Jennifer Womble, a trailblazer in the EdTech community and the visionary Program Chair of the Future of Education Technology Conference (FETC). Jennifer brings her passion for amplifying educator voices and designing meaningful professional development experiences to the table.Together, they dive into the evolution of FETC from a regional event to a nationally recognized EdTech hub, explore the rise of cybersecurity awareness in schools, and discuss the transformative role of VR and data privacy in the future of education.Whether you're a classroom teacher, tech leader, or EdTech partner, this conversation will leave you inspired to rethink community, security, and innovation in education.Key Takeaways:Jennifer Womble highlights the power of amplifying diverse voices in educationJennifer's story with FETC since 1994 & how the conference has grown to serve a international audiences while staying rooted in innovationWhy cybersecurity is no longer optional & how it's central to K–12 leadership conversationsFETC 2026 priorities & why networking & community are as valuable as the sessions themselvesIntentionality in conference design boosts engagement and impact - ie designing conferences for professional and human needsWhy students must be part of the cybersecurity conversationThe promise of VR in classrooms is already becoming a reality Data privacy remains a top priority as schools adopt more tech & educating students is the next step Parting Tool: Lucyd Glasses & Otis AI Chapters:00:00 Introduction to EdTech and Jennifer Womble03:01 Jennifer's Journey in Education06:09 The Evolution of FETC09:02 Building a National EdTech Community11:56 Cybersecurity in Education14:58 Creating a Collaborative Learning Environment18:00 Intentionality in Conference Design21:04 Engaging Students in Cybersecurity Awareness23:31 The Importance of Cybersecurity Education24:54 Engaging Students in Cybersecurity26:56 Understanding Cyber Threats28:43 Data Privacy and Student Awareness30:07 Innovative Tools for Educators32:42 Experiential Learning in VR37:21 FETC Insights and Opportunities

07-01
38:24

From NASA to K-12: Revolutionizing School Cybersecurity with Frankie Jackson (Re-Air)

Welcome to Episode 7 of the Zero Breach Zone ! Join hosts Phil Hintz and Andy Lombardo as they sit down with Frankie Jackson, a cybersecurity expert and former CTO of Cypress Fairbanks ISD, to explore the intersection of education and cybersecurity. From NASA to one of Texas's largest school districts, Frankie shares her journey and insights on developing comprehensive cybersecurity frameworks for educational institutions.As a thought leader in K-12 cybersecurity, Frankie Jackson continues advocating for increased diversity in technology, co-authoring The Savvy Ed Tech Leader alongside Sheryl Abshire, Diane Doersch, and Donna Williamson – a comprehensive roadmap helping technology practitioners advance their careers and shape the future of educational technology. This episode is highly engaging and essential listening for K-12 cybersecurity pros and the like!Key Takeaways:• Frankie Jackson transitioned from NASA to K-12 education for a better work-life balance but found her true passion• Her work in Cypress Fairbanks ISD, one of the largest school districts in Texas• The Trusted Learning Environment (TLE) and the focus on data privacy in education• Behind the scenes of he Cybersecurity Coalition and why it was formed to improve cybersecurity practices in education• The NIST Cybersecurity Framework and how it was adapted for educational institutions• Frankie explains why collaboration among strategic partners is crucial for effective cybersecurity solutions• The creation of the cybersecurity rubric, which helps school districts assess their cybersecurity maturity• Why training for cybersecurity rubric evaluators is essential for effective implementation• Phil asks if cybersecurity insurance rates can decrease with improved cybersecurity practices• Frankie Jackson envisions a standardized framework for cybersecurity in education• Parting Tool: Savvy Ed Tech Leader Self Assessment

06-17
42:25

Riding the AI Wave in Education & Adapting the Right Mindset with Dr. Adam Phyall

Welcome to episode 16 of the Zero Breach Zone. In this episode, hosts Phil Hintz and Andy Lombardo are joined by Dr. Adam Phyall, Director of Professional Learning and Leadership at All4Ed and a board member of ISTE. With a career that began as a high school science teacher, Dr. Phyall has served as a Chief Technology Officer and brings a wide breadth of experience in educational leadership and technology integration.He discusses his journey from the classroom to becoming a leader in educational technology, emphasizing the importance of integrating tech in education while ensuring student safety and inclusivity. Dr. Phyall shares insights on the role of diverse voices in ed tech policy-making and the significance of collaboration among educators. He also highlights the Future Ready Schools initiative and the impact of AI in education, advocating for thoughtful governance and community engagement.In this conversation, Phil, Andy, and Adam delve into the evolving landscape of AI in education, stressing the importance of understanding and integrating technology in schools rather than simply banning or blindly embracing new trends. They explore the challenges posed by legislative impacts on technology use, the necessity of including student voices in policy-making, and the implications of AI as a co-pilot in learning. The discussion underscores the need for curiosity and innovation in educational practices to prepare students for a technology-driven future.Key TakeawaysIntegrating technology in classrooms requires understanding both instructional and information systemsSafety and privacy in education technology are paramount for student protectionDiverse voices in policy-making lead to more inclusive and effective educational practicesFuture Ready Schools aim to provide equitable resources for all students, regardless of backgroundAI governance is essential for responsible implementation in educational settingsCollaboration among educators and stakeholders enhances the effectiveness of technology integrationProfessional development should focus on equipping teachers with the right tools and knowledgeCommunity engagement is crucial for understanding the needs of students and familiesThe educational landscape is evolving, and districts must adapt to new technologies and methodologies but blocking all AI tools in schools is impractical however guidelines for wearable AI in schools are neededStudent voices are crucial in policy discussions.Parting Tool: Socrat Ai an Ai tool built for teaching and leanring Resources Mentioned: Future Ready Schools aim to provide equitable resources for all students, regardless of backgroundUnDisrupted Podcast hosted by Dr. Adam PhyallPlaud.Ai professional Ai note taker on you pin to your shirt  Socrat Ai an Ai tool built for teaching and leanring Chapter02:59 Dr. Phyall's Journey into EdTech06:00 Navigating Technology and Safety in Education09:03 The Importance of Diverse Voices in Education12:07 Transitioning to National Level Advocacy14:58 Future Ready Schools and Cybersecurity17:52 AI in Education: Governance and Implementation21:02 Resources for Schools and Community Engagement28:49 Navigating the AI Landscape in Education31:35 The Challenges of AI Integration in Schools34:14 Legislative Impacts on Technology Use38:11 The Role of Student Voices in Policy Making41:45 Understanding AI: Definitions and Implications45:53 Embracing AI as a Co-Pilot in Learning51:15 Curiosity and Innovation in Education

06-03
36:33

Knowing Is Half the Battle... The Other Half Is Cybersecurity Funding for Schools

Welcome to episode 15 of the Zero Breach Zone podcast, where hosts Phil Hintz and Andy Lombardo discuss their experiences at recent conferences, focusing on cybersecurity strategies in K-12 education. They explore the importance of multi-factor authentication (MFA), the challenges of session timeouts, and the need for continuous improvement in cybersecurity practices. The conversation also highlights the significance of tabletop exercises for incident response and the convergence of physical and cybersecurity measures in schools. The hosts share insights on integrating technology for safety and the necessity of collaboration among various stakeholders. In this conversation, Andy Lombardo and Phil Hintz discuss various aspects of school security, including the importance of enhancing physical security measures, leveraging CISA for audits, and the role of AI in education. They emphasize the need for collaboration and networking within the EdTech community, as well as advocating for increased cybersecurity funding to protect K-12 institutions. The discussion ends with highlighting the significance of engaging with Congress to address these pressing issues and the helpful resources prepared by CoSN to do so.Key Takeaways:MFA is essential but requires ongoing adjustments & MFA should extend to social media accountsSession timeouts can pose risks if not managed properlyTabletop exercises help prepare for incidentsConvergence of physical and cyber security is crucialStakeholder collaboration is key in incident responseContinuous learning from conferences is invaluableK-12 cybersecurity threats are rising and we need your voiceCybersecurity is a bipartisan issue with real-world consequencesParting Tool: Help your district to become a Zero Breach Zone -Urge Congress to Protect and Invest in Cybersecurity Support for Schools-  through the CoSN prepared resources:https://cosn.quorum.us/campaign/115693/ Resources Mentioned Evil Jinx: https://github.com/kgretzky/evilginx2Chapters00:00 Spring Reflections and Conference Recap03:08 Cybersecurity Strategies and MFA Insights06:01 Real-World Cybersecurity Challenges09:06 Tabletop Exercises and Incident Response12:00 Convergence of Physical and Cybersecurity14:57 Integrating Technology for Safety19:12 Enhancing School Security Measures20:50 Leveraging CISA for Security Audits22:34 Insights from K-12 Conferences23:32 AI in Education: Opportunities and Challenges26:33 Networking and Collaboration in EdTech31:46 Advocating for Cybersecurity Funding39:21 Call to Action: Engage with Congress

05-20
36:33

Tech Tales & Security Talks: A Rural School Adventure with Jason Yaw Osei (Re-Air)

Welcome to Episode 6 of the Zero Breach Zone! In this episode, hosts Phil Hintz and Andy Lombardo welcome Jason Yaw Osei, Tech Director of Technology and Cybersecurity at Campbell ISD in Texas, for a fun and engaging discussion about cybersecurity in education and innovative training approaches.Yaw's infectious energy and passion for all things tech shine through in this episode packed with laughs, tech talk, and cybersecurity insights. From geeking out about AI innovations to trading cybersecurity war stories, the conversation flows effortlessly between serious security discussions and playful tech banter. Whether you're a cybersecurity pro or just love hearing passionate people talk tech, this episode delivers entertainment and education in equal measure. Key TakeawaysBreaking Down Innovation Barriers: Yaw discusses his thoughtful approach to introducing new security practices in communities that often view change with skepticism, showing how building trust and understanding can transform resistance into enthusiasmDigital Identity as Personal Security: Yaw breaks down complex cybersecurity concepts using brilliant home security analogies - from treating passwords like house keys to viewing data breaches like leaving your front door wide open. His memorable comparisons help make digital security feel as natural and necessary as locking your doors at nightInnovative Training Through CyberNut: Discussion of how gamification is revolutionizing cybersecurity training, making it more engaging and effective for educational staff in his districtFuture of EdTech Security: Analysis of emerging trends in educational cybersecurity, including the integration of AI and automation in school settings.CyberNut - the security awareness training platform built exclusively for schools Parting Tool: AboutMy.email: lets you send us a questionable email and we'll analyze it and tell you about its authentication, size, structure and how well it complies with best practices set by Yahoo & Google 

05-06
34:08

Ransomware Rising: Confronting the K-12 Cybersecurity Crisis

Welcome to episode 14 of the Zero Breach Zone, in this episode hosts Phil Hintz and Andy Lombardo dive into the current state of K-12 cybersecurity, analyzing key findings from the Cisco Talos 2024 report. They explore the concerning rise in ransomware attacks targeting educational institutions, the struggles schools face with limited security budgets, and practical strategies for strengthening cyber defenses. The conversation covers the critical importance of regular system monitoring, vulnerability patching, and addressing MFA weaknesses that leave schools exposed. Phil and Andy emphasize that human factors remain one of the biggest security challenges, highlighting how effective security awareness training can significantly reduce risk when implemented thoughtfully. The discussion also examines the growing relevance of zero trust architecture and how phishing attacks continue to be cybercriminals' preferred entry point to school systems. Throughout the episode, they stress that despite being perceived as low-value targets, K-12 schools are increasingly in cybercriminals' crosshairs, making collaboration among education cybersecurity professionals more important than ever.Key Takeaways:K-12 education is increasingly targeted by cybercriminals despite being perceived as low-valueEducational institutions now lead in ransomware attacks, with incidents peaking during school breaksBudget constraints severely limit cybersecurity initiatives in schoolsFundamental security practices are critical: regular monitoring, patching systems, and addressing MFA vulnerabilitiesSecurity awareness training delivers strong ROI when implemented effectivelyEmail security and phishing prevention remain essential first-line defensesCreating a culture of cyber awareness among all staff is fundamental to protectionZero trust architecture and data-driven security decisions are becoming increasingly importantCollaboration among education cybersecurity professionals is vital for improving collective defenseProactive measures and basic cyber hygiene significantly reduce exposure to attacksResources Mentioned:- Cisco Talos 2024 Cybersecurity Report- CyberNut Security Awareness Training for K-12- cosn.quorum.us/campaign/115693/ - Parting Tool: Rust Desk as a fee alternative to TeamViewer on Andy's Blog EdTechIrl  (@edtechirl on substack) Chapters00:00 Introduction to K-12 Cybersecurity02:49 Insights from Cisco Talos 2024 Report06:04 Understanding the Target: K-12 Education08:56 Challenges in Cybersecurity Funding11:57 The Importance of Regular Monitoring and Patching15:02 Security Awareness and Human Factors in Cybersecurity20:19 Navigating Email Security Challenges23:22 Building a Culture of Cyber Awareness25:14 Understanding Spoofing and Phishing Attacks27:31 Ransomware Trends and Threats30:12 The Rise of Ransomware as a Service39:56 Proactive Measures Against Ransomware43:35 Remote Access Solutions for Security

04-22
41:39

The Entrepreneur's Learning Curve with Oliver Page, (Re-Air)

Welcome to Episode 4 of the Zero Breach Zone! In this episode, we sit down with Oliver Page, CEO and founder of CyberNut, for an inspiring conversation about entrepreneurship and cybersecurity in education. Oliver shares his journey as a serial entrepreneur, including his experience founding NutKase, a successful K-12 device case manufacturer that protected over 3 million student devices. Through both success and failure, he shares valuable lessons that led him to his current venture. As the founder of CyberNut, he discusses how his company is revolutionizing cybersecurity training in educational institutions with innovative, user-friendly solutions.Oliver explores the critical need for comprehensive cybersecurity education and how CyberNut is meeting this challenge through fast, efficient training programs and authentic phishing simulations. The discussion highlights how their unique approach caters to both faculty/staff and student needs, setting them apart in the educational cybersecurity space.

04-08
33:34

Building Strong EdTech Partnerships & Creating a Cybersecurity Culture in Schools with Jeff McCoy | FETC 2025 Series

Welcome to episode 13 of the Zero Breach Zone! In this episode hosts Phil Hintz and Andy Lombardo speak with Jeff McCoy, Associate Superintendent for Academics in Greenville County, South Carolina. Drawing from his 25+ years in education, Jeff discusses the integration of technology in schools, emphasizing the distinction between vendors and solution partners. The conversation highlights cybersecurity as a shared responsibility across all departments, not just technology. Jeff stresses that security training should be continuous rather than annual, using short, clear communications. The discussion covers how data breaches often involve academic software, the importance of evaluating vendors' security practices, and the need for transparency with AI implementation in education. Jeff emphasizes that technology should ultimately enhance teaching and learning, requiring proper change management and cross-departmental collaboration. As this weeks Parting Tool, Jeff highlights the crucial role of 1EdTech, a global non-profit that develops open standards to reduce complexity, accelerate innovation, and expand educational possibilities worldwide.Key Takeaways:- Cybersecurity is a shared responsibility across all departments, not just technology- Distinguish between vendors (who sell products) and solution partners (who address needs)- Cybersecurity training should be continuous, using short, clear communications- Data breaches frequently involve academic software, not just administrative systems- Multi-factor authentication is essential for protecting school systems- Vendors must be evaluated for their cybersecurity practices and certifications- AI in education requires transparency about data usage and privacy- Technology should enhance teaching and learning, not complicate it- 1EdTech provides valuable resources for vetting educational appsResources Mentioned:- Multi-factor authentication solutions- Greenville County Schools' cybersecurity protocols- Educational technology evaluation frameworks- Parting Tool: 1EdTech for vetting educational applications

03-25
15:26

Energizing EdTech with Michelle Krieger: A Dynamic Conversation on School Cybersecurity | FETC 2025 Series

Welcome to episode 12 of the Zero Breach Zone! Join hosts Phil Hintz and Andy Lombardo as they sit down with Michelle Krieger to explore topics top of mind at the intersection of education and cybersecurity recorded at FETC. In this energetic conversation, Michelle shares her unique journey from Special Education Teacher to Education Innovation to Data Protection Officer, to Director of Technology. Michelle offers valuable insights on the importance of data protection in increasingly digital learning environments. The discussion delves into crucial aspects of differentiating between Director of Technology and data protection officer roles. Everyone emphasizes the importance of "secure by design" principles, sharing examples of how schools can implement data privacy practices from the ground up rather than as afterthoughts. Drawing from her classroom experience, Michelle shares stories about working with students of all ages on online safety, from using a baking metaphor with elementary school kids to discussing deep fakes with high schoolers. Michelle's practical approach to making security concepts accessible to both educators and students resonated throughout the conversation, particularly when discussing the balance between technological innovation and responsible data stewardship. This episode is a must listen to all interested in edtech and cybersecurity!Key TakeawaysThe critical importance of data protection and cybersecurity in educational settings Challenges of implementing technology in schools while maintaining privacy Necessity of tailored cybersecurity training for educational staff and all school employees (from teachers to bus drivers)Proactive approaches to protecting student data and retention evaluationStrategies for engaging students in cybersecurity education from elementary to high schoolBuilding effective collaboration between educators and technology providers The evolving landscape of data privacy practices in educationResources Mentioned: Secure by Design & SISData Guard by ClassLink Antoinette King's book, The Digital Citizen's Guide to CybersecurityThe Cybersecurity RubricParting Tool: Explaining to your Superintendent or School Board the difference between the role of Director of Technology & Data Protection Officer 

03-11
31:19

Recommend Channels