Student Privacy at the U.S. Department of Education

The U.S. Department of Education’s website to provide schools and school districts with best practices to use in their management of information about students. This site aims to assist stakeholders in protecting the privacy of students by providing official guidance on FERPA, technical best practices and the answers to Frequently Asked Questions.

CSAT – CIS Controls Self-Assessment Tool

The CIS Controls Self-Assessment Tool, or CIS CSAT, is a free web application that enables security leaders to track and prioritize their implementation of the CIS Controls. For each CIS Control and sub-control, CSAT helps organizations track its documentation, implementation, automation, and reporting.

CIS Controls V7.1 Implementation Groups

The CIS Controls Implementation Groups take a “horizontal” look across all of the CIS Controls and identify a set of Sub-Controls to provide a simple and accessible way to help organizations of different classes focus their security resources.

Reasonable Security Practices

The Learning Technology Center selected 43 security best practices that all districts should implement to comply with the Student Online Personal Protection Act. The practices align with CIS Controls, a globally recognized cybersecurity standard, and are vetted by Illinois school district technology leaders.