[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"doc-seo-586925-105":3,"detail-sidebar-cat-0-en-105":80,"doc-detail-586925-en":130},{"code":4,"msg":5,"data":6},0,"ok",{"site_id":7,"language":8,"slug":9,"title":10,"keywords":11,"description":12,"schema_data":13,"social_meta":73,"head_meta":75,"extra_data":77,"updated_unix":79},105,"en","k-12-digital-infrastructure-brief-defensible-and-resilient","K-12 Digital Infrastructure Brief - Defensible and Resilient","","Guides K–12 education stakeholders on building digital infrastructure that is defensible and resilient, framing education infrastructure as critical infrastructure. Presents a guiding scenario, clarifies shared responsibilities, and highlights key considerations for planning, governance, and operational readiness. Recommends actions mapped to cybersecurity performance goals across the Identify, Protect, Detect, Respond, and Recover lifecycle, including asset inventory, MFA, password strength, training, incident response exercises, vendor risk management, and backup testing.",{"@graph":14,"@context":72},[15,34,55],{"@type":16,"itemListElement":17},"BreadcrumbList",[18,23,27,31],{"item":19,"name":20,"@type":21,"position":22},"https://docshare.wps.com","Home","ListItem",1,{"item":24,"name":25,"@type":21,"position":26},"https://docshare.wps.com/document/","Document",2,{"item":28,"name":29,"@type":21,"position":30},"https://docshare.wps.com/document/research-report/","Research & Report",3,{"item":32,"name":10,"@type":21,"position":33},"https://docshare.wps.com/document/k-12-digital-infrastructure-brief-defensible-and-resilient/586925/",4,{"url":32,"name":10,"@type":35,"image":36,"author":41,"headline":10,"publisher":44,"fileFormat":47,"inLanguage":8,"description":12,"dateModified":48,"datePublished":49,"encodingFormat":47,"isAccessibleForFree":50,"interactionStatistic":51},"DigitalDocument",{"url":37,"@type":38,"width":39,"height":40},"https://docshare.wps.com/thumbnails/k-12-digital-infrastructure-brief-defensible-and-resilient/586925.png","ImageObject",300,407,{"name":42,"@type":43},"Sarah ","Person",{"url":19,"name":45,"@type":46},"DocShare","Organization","application/pdf","2026-10-30","2026-10-15",true,{"@type":52,"interactionType":53,"userInteractionCount":33},"InteractionCounter",{"@type":54},"ViewAction",{"@type":56,"mainEntity":57},"FAQPage",[58,64,68],{"name":59,"@type":60,"acceptedAnswer":61},"What is the core goal of this K–12 digital infrastructure brief?","Question",{"text":62,"@type":63},"It focuses on making K–12 digital infrastructure defensible and resilient by applying cybersecurity practices across the Identify, Protect, Detect, Respond, and Recover lifecycle.","Answer",{"name":65,"@type":60,"acceptedAnswer":66},"How does the brief connect cybersecurity work to shared responsibilities?",{"text":67,"@type":63},"It includes a section titled “Whose Job is It?” and lays out key considerations to clarify who is responsible for different aspects of readiness and operations.",{"name":69,"@type":60,"acceptedAnswer":70},"What kinds of recommendations are included in the high-impact section?",{"text":71,"@type":63},"Recommendations cover actions such as asset inventory and leadership identification, mitigating known exploited vulnerabilities, vendor and third-party risk management, multi-factor authentication, password strength enforcement, cybersecurity training, incident response planning, and backup testing.","https://schema.org",{"og:url":32,"og:type":74,"og:title":10,"og:site_name":45,"og:description":12},"article",{"robots":76,"canonical":32},"index,follow",{"doc_id":78,"site_id":7},586925,1792210021,{"code":4,"msg":81,"data":82},"success",[83,87,91,95,100,105,110,114,119,122,126],{"id":22,"doc_module":4,"doc_module_name":25,"category_name":84,"show_sort_weight":85,"slug":86},"Story & Novel",90,"story-novel",{"id":26,"doc_module":4,"doc_module_name":25,"category_name":88,"show_sort_weight":89,"slug":90},"Literature",80,"literature",{"id":33,"doc_module":4,"doc_module_name":25,"category_name":92,"show_sort_weight":93,"slug":94},"Exam",70,"exam",{"id":96,"doc_module":4,"doc_module_name":25,"category_name":97,"show_sort_weight":98,"slug":99},5,"Comic",60,"comic",{"id":101,"doc_module":4,"doc_module_name":25,"category_name":102,"show_sort_weight":103,"slug":104},6,"Technology",50,"technology",{"id":106,"doc_module":4,"doc_module_name":25,"category_name":107,"show_sort_weight":108,"slug":109},7,"Healthcare",40,"healthcare",{"id":111,"doc_module":4,"doc_module_name":25,"category_name":29,"show_sort_weight":112,"slug":113},8,30,"research-report",{"id":115,"doc_module":4,"doc_module_name":25,"category_name":116,"show_sort_weight":117,"slug":118},9,"Religion & Spirituality",20,"religion-spirituality",{"id":117,"doc_module":4,"doc_module_name":25,"category_name":120,"show_sort_weight":117,"slug":121},"World Cup","world-cup",{"id":123,"doc_module":4,"doc_module_name":25,"category_name":124,"show_sort_weight":123,"slug":125},10,"Lifestyle","lifestyle",{"id":127,"doc_module":4,"doc_module_name":25,"category_name":128,"show_sort_weight":96,"slug":129},19,"General","general",{"code":4,"msg":81,"data":131},{"doc_id":78,"user_id":132,"nickname":42,"user_avatar":133,"doc_module":4,"category_id":111,"category_name":29,"doc_title":10,"doc_description":12,"doc_content":134,"file_id":135,"file_url":136,"file_type":137,"file_size":138,"view_count":33,"is_deleted":4,"is_public":22,"is_downloadable":22,"audit_status":22,"page_count":139,"language":140,"language_code":8,"site_id":7,"html_lang":8,"table_of_contents":141,"faqs":142,"seo_title":143,"seo_description":12,"update_tm":144,"read_time":145,"preview_page_count":4},962085320529,"https://ap-avatar.wpscdn.com/davatar_9964176cb1d06d4a9deccf72a44ae3dc","August 2023  \nVersion 1.0  \nExamples Are Not Endorsements  \nThis document contains examples and resource materials that are provided for the user’s convenience. The inclusion of non-Federal resources in this document is not intended to reflect its importance, nor is it intended to endorse any views expressed, initiatives, or products or services offered. Any opinions expressed in these materials do not necessarily reflect the positions or policies of the U.S. Department of Education or the Federal government. The U.S. Department of Education does not control or guarantee the accuracy, relevance, timeliness, or completeness of any outside information included in these materials.  \nLicensing and Availability  \nThis report is in the public domain. Authorization to reproduce this report in whole or in part is granted. While permission to reprint this publication is not necessary, the suggested citation is:  \nU.S. Department of Education, Office of Educational Technology, K–12 Digital Infrastructure Brief: Defensible and Resilient, Washington, D.C. , 2023.  \nThis report is available on the Department’s Website at [http://tech.ed.gov](http://tech.ed.gov).  \nRequests for alternate format documents such as Braille or large print should be submitted to the Alternate Format Center by calling 1-202-260-0852 or by contacting the 504 coordinator via email [at](at om_eeos@ed.gov)[ ](at om_eeos@ed.gov)[om_eeos@ed.gov](at om_eeos@ed.gov).  \nNotice to Limited English Proficient Persons  \nIf you have difficulty understanding English, you may request language assistance services for Department information that is available to the public. These language assistance services are available free of charge. If you need more information about interpretation or translation services, please call 1-800-USA-LEARN (1-800-872-5327) (TTY: 1-800-437-0833) or email [us at:](us at: Ed.Language.Assistance@ed.gov. Or write to:)[ ](us at: Ed.Language.Assistance@ed.gov. Or write to:)[Ed.Language.Assistance@ed.gov](us at: Ed.Language.Assistance@ed.gov. Or write to:)[. Or write to:](us at: Ed.Language.Assistance@ed.gov. Or write to:) U.S. Department of Education, Information Resource Center, LBJ Education Building, 400 Maryland Ave. SW, Washington, DC 20202.  \nK-12 DIGITAL INFRASTR UCTURE BRIEF: DEFENSIBLE AND RESILIENT i  \nContents  \nACKNOWLEDGMENTS ........................................................... 1  \nINTRODUCTION & OVERVIEW .....................................................2  \nEducation Infrastructure is Critical Infrastructure ...............................2  \nWhat Are We Working Toward? ................................................ 3  \nA Guiding Scenario ............................................................. 3  \nWhose Job is It? ..............................................................5  \nKey Considerations ...........................................................7  \nDIGITAL INFRASTRUCTURE SHOULD BE DEFENSIBLE AND RESILIENT ............. 8  \nFinding the Right Analogy: Fire Safety and Cybersecurity ....................... 8  \nHigh-Impact Recommendations .............................................. 9  \nCISA’s Cross-Sector Cybersecurity Performance Goals (CPGs) ..................10  \nIdentify ..................................................................... 11  \nIdentify the Crown Jewels and Conduct an Asset Inventory (CPG 1.A) .............. 11  \nIdentify Organizational Cybersecurity Leadership (CPG 1.B) ....................... 11  \nMitigate Known Exploited Vulnerabilities (CPG 1.E) ............................... 11  \nManage Vendor and Third-Party Risk in Procurement Process (CPGs 1.G, 1.H, 1.I) ... 12  \nProtect .....................................................................13  \nImplement Multi-Factor Authentication (CPG 2.H) ................................ 13  \nEnforce Minimum Password Strength (CPG 2.B) ................................. 13  \nBasic Cybersecurity Training (CPG 2.I) .......................................","cbCaimOES21qRbEi","https://ap.wps.com/l/cbCaimOES21qRbEi","pdf",6393766,25,"English","# Acknowledgments\n# Introduction & Overview\n## Education Infrastructure is Critical Infrastructure\n## What Are We Working Toward?\n## A Guiding Scenario\n## Whose Job is It?\n## Key Considerations\n# Digital Infrastructure Should Be Defensible and Resilient\n## Finding the Right Analogy: Fire Safety and Cybersecurity\n## High-Impact Recommendations\n## CISA’s Cross-Sector Cybersecurity Performance Goals (CPGs)\n## Identify\n## Protect\n## Detect\n## Respond\n## Recover\n# What Vendors Can Do\n# Conclusion","[{\"question\":\"What is the core goal of this K–12 digital infrastructure brief?\",\"answer\":\"It focuses on making K–12 digital infrastructure defensible and resilient by applying cybersecurity practices across the Identify, Protect, Detect, Respond, and Recover lifecycle.\"},{\"question\":\"How does the brief connect cybersecurity work to shared responsibilities?\",\"answer\":\"It includes a section titled “Whose Job is It?” and lays out key considerations to clarify who is responsible for different aspects of readiness and operations.\"},{\"question\":\"What kinds of recommendations are included in the high-impact section?\",\"answer\":\"Recommendations cover actions such as asset inventory and leadership identification, mitigating known exploited vulnerabilities, vendor and third-party risk management, multi-factor authentication, password strength enforcement, cybersecurity training, incident response planning, and backup testing.\"}]","K-12 Digital Infrastructure Brief - Defensible and Resilient | PDF",1792060016,63]