605.122 Admin-Core Data Privacy and Security
-
Service Code: 605.122
- Chargeback code 605.123
Contact(s): Dan Fullerton (585-383-2281)
Charges: See rate sheet
Description
-
This service provides training, guidance, and support to districts in their implementation and maturation of their cybersecurity and data privacy efforts, as well as facilitation of tools designed to enhance those efforts. This service supports districts in protecting critical data and resources while ensuring compliance with NYS Education Law 2-d.
Examples of tools utilized through this service include, but are not limited to, specific anti-malware systems, cybersecurity training and assessments, cybersecurity consulting, business continuity and disaster recovery preparedness, regulatory compliance and risk management tools, software and data inventory tools, and event mitigation and resolution. Network monitoring services such as SmartCentre and Network Managed Services as well as SIEM/SOC services are outside the scope of this service and available through 605.540 Network Monitoring
This is a mandatory service for component districts.
Requirements
-
- Core Participation
District Responsibilities
-
- Designate a Data Protection Officer (DPO)
- Attend and participate in user groups and cohorts
- Adhere to laws and regulations related to cybersecurity and data privacy
RIC Responsibilities
-
- Facilitate user groups and collaboration between districts
- Contract administration, license tracking and invoicing
- Provide collaborative guidance and resources