Creating a Common Culture of Action Around Cybersecurity - Results from the 2021 Project Tomorrow - iboss National K-12 Education Cybersecurity Report

Oct 15, 2026

Uploaded by Angel

Increasing district security posture requires educating executive leadership so cybersecurity becomes a shared organizational culture. As K-12 technology adoption expanded—through devices, learning platforms, online communication tools, and cloud applications—the digital footprint and threat exposure grew. Fallout from cyber or ransomware incidents can extend beyond disrupted instruction, affecting finances, public relations, and community trust. A 2021 Project Tomorrow - iboss research effort gathered responses from nearly 600 district administrators to assess readiness and define next steps.

LanguageEnglish

CategoryResearch & Report

FormatPDF

Pages20

Reading Time50 min

AccessFree to download

Introduction

K-12 cybersecurity readiness context

K-12 Cybersecurity Insights

Creating aCommonCulture ofActionAroundCybersecurity Results from the 2021 Project Tomorrow -iboss National K-12 Education Cybersecurity Report ibuSS # Introduction Increasing the security posture within a school district necessitates deliberateeducation of executive leadership so that a common cultural understandingabout the importance of cybersecurity is adopted across the organization. -District Technology Leader stress-test for the technology infrastructure inmany school districts.To support the continuityof learning,a core component of a schooldistrict's mission,new technology plans androllouts were quickly implemented thatsignificantly increased the digital footprint andreach within many districts.For example,anunprecedented number of digital learning devicesand mobile hotspots were distributed to studentsfrom kindergarten through high school.Learningmanagement systems were not only adopted buttheir usage was mandated alongside new onlinecurriculum products supporting both core andsupplemental instruction.This resulted in recordlevels of online activity and product usage bystudents,teachers and staff.Online tools tosupport communications from school to home aswell as internal operational interactions have Executive leaders across allsectors have afiduciary responsibility to protect the tangible andintangible assets of their organization. Increasingly,those assets include mission-criticaldata and information systems.The same is truefor K-12 education enterprises with the additionalimperative,unique to education,to ensure thattechnology resources are readily available andsafe to use to support the educational mission ofthe school district.At the heart of this obligationfor comprehensive asset protection is the need fora shared value system and accountability aroundcybersecurity across the entire organization.Tothat end,today is very much different thanyesterday in K-12 education. The pandemic and resulting disruptions intraditional school modalities created a new become essential resources.And adoption plansfor new cloud-based applications including forfinance and human resources were re-prioritizedon a faster timeline.For the most part,thesechanges in our education enterprises,mostnotably around the increased usage of technologywithin both the instructional and operationalaspects of a district,are permanent changes.Despite nostalgic pulls for a pre-pandemic schoolmodel,it is simply not possible to turn the clockback to February 2020 and unravel the increaseddependency we have today on technology withinour education systems. While many reports and media stories havedocumented the physical or behavioral impact ofthese changes on the way students accesslearning content or how a teacher records theirprofessional development time,there are otherramifications of this new environment that may beless obvious but certainly not less important.Heading that list is the increased risk andvulnerability of K-12 education data andinformation systems to a cyberattack.Withincreased dependence on technology and a wideronline network,especially beyond the traditionalschool physical footprint,comes the inevitableamplified exposure to new potential threats to mission-critical information systems.The falloutfrom a cyber or ransomware attack on a schooldistrict's infrastructure can have a long tail ofimpact beyond disruptions to the educationdelivery system including financial,publicrelations and community trust repercussions.And while there is much to be learned from howother sectors,including those in transportation,finance,retail and manufacturing have addressedtheir cyber threats and/or events,the readinessof K-12 districts today to deal with these newrealities appears to be lagging despite theincreased vulnerabilities and documentedupticks in such threats and attacks. Project Tomorrow's®annual Speak UpResearch Project has documented the evolutionof technology use,both from an instructional andoperational perspectiv

FAQs

Why does the report emphasize executive leadership education for cybersecurity?

It argues that improving district security depends on executive leaders adopting a shared cultural understanding of cybersecurity’s importance across the organization.

What changed in K-12 education that increased cybersecurity risk?

Technology dependence expanded through devices, mandated learning management use, online curriculum, communication tools, and faster adoption of cloud applications, which amplified exposure to new threats.

How was the 2021 cybersecurity research conducted and who participated?

Nearly 600 district administrators and technology leaders nationwide completed an online survey between January and May 2021 for the Project Tomorrow - iboss National K-12 Education Cybersecurity Research Study.

Oct 15, 2026

Uploaded by Angel