Best Practices Standards DATA PRIVACY & CYBERSECURITY

Cyber Incident Response & Recovery Framework for Schools

K-12 schools have become a prime targets of cyber attacks. Between July 2023 and December 2024, 82% of US schools reported cyber threat impacts.¹

All K-12 schools must expect cyber threats going forward, and be prepared to bounce back when threat actors strike.

This framework offers a holistic approach to addressing this imperative, defining the structured lifecycle for responding to and recovering from cyber incidents within an educational environment.

With it, technology leaders and key stakeholders can walk through the essential steps to containing threats, restoring critical systems, and returning operations to normal.

This plan is also designed to be comprehensive in addressing security challenges with practical strategies that empower swift, coordinated action.

View Resource (opens in a new tab)

Author

Duane Shaffer
Director of Technology Services, Learning Technology Center
View Profile: Duane Shaffer
Justin Morgan
IT Strategy Manager, Learning Technology Center
View Profile: Justin Morgan
Will Brackett
Director, vCISO Program, Learning Technology Center
View Profile: Will Brackett

Details

For Administrators, Technology Leaders/Support
Grade Levels All Grades (K-12)

Related Resources

See all Resources →
ResourceNew

ISBE AI Guidance Quick Hits

A two-page summary of ISBE’s July 2026 Artificial Intelligence Guidance: the four foundational tenets and four operational guardrails district leaders need to know.

Guidance · Handout/Worksheet
Resource

AI Toolkit

A curated, practical collection of AI guidance, frameworks, sample policies, lessons, tools, and professional learning for Illinois K-12 policy makers, district leaders, and teachers.

Guidance · Resource Collections
Resource

Sample AI Readiness Communications

Adaptable communication templates to help K–12 districts explain AI use to families, staff, students, board members, and vendors. Includes sample letters, FAQs, staff memos, student agreements, vendor questions, and incident-response messages to customize for local…

Guidance · Resource Collections

Keep Exploring