CASE STUDY:
Reporting & Governance Restructuring Following Cyber Incident at a K-12
BRIEF:
A breach at a common k-12 software provider highlighted the need for tighter controls within a school district.
ROLE OF MAX2:
Work with insurance carrier’s team to ensure frictionless response to potential data exfiltration.
Ensure the incident was kept localized and ringfence any potential contagion to other district systems.
Put in place monitoring and reporting tools to manage vendors and network traffic going forward.
WHAT WAS DELIVERED?
Coordination with breach response team from the insurance company making certain claims would be payable and contractual processes were followed.
Participation in information sessions held by the breached vendor.
Analysis of district’s specific use of the breached vendor tool and quantification of potential impact on the district.
Implementation of ongoing 3rd party monitoring and vulnerability scanning.
New vendor procedures developed for onboarding and isolating new vendors.
OUTCOME:
Regular reporting to district administration implemented with vendor management and insurance coverage put in place.
services:
INDUSTRIES: