Information Resources
Page Navigation
Cybersecurity
-
What Is Cybersecurity?
Cybersecurity is how individuals and organizations reduce the risk of cyberattacks. Cybersecurity's core function is to protect the devices we all use and the online services we access, at work and at home, from theft or damage.
Congress enacted the K-12 Cybersecurity Act of 2021 which required the Cybersecurity and Infrastructure Security Agency (CISA) to report on cybersecurity risks facing elementary and secondary schools and develop recommendations that include cybersecurity guidelines designed to help schools face these risks.
Each year, ACPS teachers and staff participate in security awareness training and simulated phishing campaigns. Security awareness training helps protect ACPS data, systems, and networks from malicious attacks and cyber threats, while simulated phishing campaigns strengthen an employee's ability to detect emails from hackers.
KnowBe4
KnowBe4 is the world's largest integrated platform for security awareness training combined with simulated phishing attacks. ACPS uses this software platform to build a strong security culture by implementing annual security awareness training and phishing campaigns.
Phishing campaigns are designed to be a learning experience within KnowBe4's controlled environment and these opportunities provide employees with the tools needed to protect district and personal data.
Security Awareness Training & Annual Phishing Campaign for ACPS Staff: November 2024 - May 2025
SAPA & Security Awareness Training
The KnowBe4 Security Awareness Proficiency Assessment (SAPA) evaluates our district's security awareness training needs by identifying gaps in individual users’ knowledge as well as recommending learning improvements. Fifty-nine percent of ACPS employees participated in the SAPA and based on their results, were assigned to one of two Security Awareness Training tracks:
- 'Fast Track Cybersecurity Training' for scoring 80% or above (23 minutes)
- 'Full Cybersecurity Training' for scoring 79% or below (45 minutes)
Annual Phishing Campaign
Cybercriminals use phishing attacks to gain access to professional and personal information. To combat phishing attacks, all ACPS staff needs to be able to identify red flags and possible threats in phishing emails.
The ACPS phishing campaign will include the following types of simulated attacks and increase in difficulty as the academic year progresses:
- Phishing Link
- Attachment
- Spear Phishing
- Reply-To
- QR Code
- Callback Phishing
- Blackmail Scam
ACPS staff are encouraged to use the 'Report phishing' tool, as opposed to forwarding suspicious emails to the ACPS Cybersecurity Team.
Security Hints & Tips Newsletters
"Security Hints and Tips" are bi-weekly newsletters ACPS staff receive via email. The intent of these newsletters is to keep ACPS staff informed about common cybersecurity topics and reinforce the topics learned in Security Awareness Training.
Reporting a Cybersecurity Incident
-
If you suspect a potential cybersecurity incident, dial extension 1116, 1118, 1502, or 1554.
If you leave a message, immediately send an email to HelpDesk.Note: Email addresses are followed by @gm.sbac.edu
Articles
-
School ransomware attacks are on the rise. What can districts do?
Cyberattacks inflict logistical, legal and financial damage on schools — and take an emotional and physical toll on their communities.