Learn how to be a “Rock Star DPO” for your district. The session will cover Ed Law 2-d Part 121 best practices and the steps DPOs can take to earn “Rock Star” status. The audience for this session can include newly appointed DPOs or DPOs that would like a refresher.

This session provides attendees with a panel of 5 DPO's from around the state that will be discussing the best practices they have put into place for 2024-25.

Learn how to respond quickly and effectively to phishing attempts, with a focus on system responses (with an emphasis on Google) and follow-up actions beyond the system. This session will introduce the FLARE framework (Find, Lock Down, Alert, Review, Evaluate) to guide you through immediate actions during an attack and post-incident improvements.

The 12 Regional Information Centers (RICs) have been working in partnership with NYSED to develop a new centralized and standardized structure to support districts in accessing Data Privacy Agreements (DPAs).  Using this structure, educational agencies will be able to piggyback on existing DPAs with vendors that include terms to address the Family Education Rights and Privacy Act (FERPA), New York State Education Law Section 2-d (Ed Law 2-d), and other data privacy requirements.  Additionally, agencies will be able to submit requests to the RICs to initiate the negotiation of new DPAs.  This panel session will support technology leaders, administrators, and other interested stakeholders in learning more about this structure.

A gamified cybersecurity tabletop simulation where you roll the dice, battle cyber threats, and defend critical data in this interactive tabletop adventure where strategy and quick thinking determine your fate! 

In today’s digital landscape, educational institutions are increasingly targeted by cyber threats, making it critical to have a well-prepared response plan. This presentation will explore the comprehensive response to the recent PowerSchool data breach, detailing the steps taken to mitigate risks, communicate transparently, and strengthen cybersecurity practices.

This session will provide a real-world case study on navigating cybersecurity challenges in education and will offer actionable strategies for improving response times, vendor accountability, and data security policies. Whether you are a technology leader, administrator, or IT professional, this presentation will equip you with the knowledge and tools to better protect your institution from future cyber threats.

Join us for an in-depth workshop where educators, administrators, and IT professionals come together to navigate the complex landscape of data retention in schools. In an era where data plays a crucial role in decision-making and accountability, understanding what records to keep, which ones to discard, and the potential repercussions of data mismanagement is vital.

During this engaging session, we will cover:
- Essential Records: Identifying the types of data that are legally required to be retained and best practices for storing them securely.
- Data Disposal: Learning about effective methods for safely disposing of data that is no longer needed, and understanding the risks of improper disposal.
- Legal and Ethical Considerations: Exploring the legal obligations and ethical considerations surrounding data retention and how to ensure compliance with relevant regulations.
- Real-World Examples: Examining case studies of schools that faced challenges due to poor data retention policies and what we can learn from their experiences.
- Practical Strategies: Developing actionable strategies for creating a robust data retention policy tailored to your school's unique needs.

Equip yourself with the knowledge and tools to make informed decisions about data management and safeguard your school from potential data-related pitfalls. Whether you're looking to update your current practices or establish new protocols, this workshop will provide valuable insights and practical guidance.

Let's demystify data retention and ensure your school's data is managed effectively and responsibly!

I will take my notes, presentations, and questions from DPOs from around the State for the past 4 years and compile them into a concise toolkit comprised of 10 skills a DPO should have: 5 things that are a low bar threshold must-have and 5 things to strive for as best practices. The presentation will focus heavily on 8 NYCRR Part 121 requirements. Group participation encouraged!

This session will provide an overview of the implementation a Student Data Privacy PIN system in the Buffalo Public Schools. We will discuss the overall need for implementing the system, process for creating secure PINs within the SIS, educating staff on use, communicating with stakeholders, and going live with the system to share the opportunities and challenges from our experience to strengthening student data privacy across the district.

In an era where cybersecurity threats are ever-evolving, school leaders play a crucial role in safeguarding their institution's digital assets. This session will empower educational leaders with the knowledge and tools needed to implement the NIST Cybersecurity Framework (CSF) effectively within their schools.

Participants will explore the leadership strategies required to align cybersecurity initiatives with educational goals, foster a culture of security awareness, and ensure compliance with regulatory standards. Through practical insights and actionable strategies, attendees will learn how to lead their institutions in adopting the core functions of the NIST CSF to build a resilient cybersecurity posture.

Key Takeaways:

- The role of leadership in driving cybersecurity initiatives
- Strategic implementation of the NIST CSF in educational environments
- Best practices for fostering a culture of cybersecurity awareness
- Tools and resources to support ongoing security improvements

Join this session to discover how proactive leadership can make cybersecurity an integral part of your school's success.

In a digitally inclusive learning environment, security is paramount to ensure equitable access and safety for all students. Join representatives from NYS School Districts and Arctic Wolf for a comprehensive session on enhancing school security through advanced threat intelligence. This session will explore how K-12 schools can leverage cutting-edge threat intelligence solutions to protect students, staff, and data from increasingly sophisticated cyber threats. Join us in a discussion on best practices, case studies, and effective collaboration between schools and security vendors to create a resilient, inclusive digital learning environment. 

Participants will gain insights into:
- Real-world Threats and Challenges in K-12: Learn about the unique security challenges facing schools and the importance of protecting student data in inclusive digital environments.
- Threat Intelligence Strategies: Discover how Arctic Wolf’s threat intelligence services help identify, prevent, and mitigate cyber threats, providing a proactive stance in safeguarding student data and ensuring safe digital learning experiences.
- Building a Culture of Security Awareness: Explore ways to foster a security-first mindset among staff and students, ensuring everyone plays a role in protecting school digital resources.