K12 Six
Upcoming K12 Six Events
Top 3 Actionable Takeaways:
- Gain a roadmap to make meaningful cybersecurity progress in alignment with their district’s resources and needs.
- Understand how CISA frames cybersecurity as a key element of school safety and resilience.
- Identify cost-effective and practical steps, backed by recognized cybersecurity frameworks, to support district leadership and planning discussions.
Join us for a practical, K–12-focused session on maximizing your district’s security and ROI in Microsoft Purview by enabling key, often-overlooked features.
We will demonstrate how to gain deep visibility into where sensitive student and staff data resides across Microsoft 365—and how it’s used—without creating friction for educators. You will learn how enabling auditing, co-authoring, and native PDF support streamlines incident investigations, public records requests, and daily collaboration. Finally, we’ll walk through real-world K–12 scenarios using Content Explorer and Activity Explorer to surface hidden risks in SharePoint, OneDrive, and Teams, building a solid foundation for advanced Data Loss Prevention (DLP) policies.
Top 3 Actionable Takeaways:
Gain Full Incident Visibility: Enable Purview auditing across your tenant to maintain a clear audit trail of who accessed or shared sensitive student and staff data when security events arise.
Remove Collaboration Roadblocks: Enable co-authoring and native PDF support for encrypted files so educators and administrators can securely collaborate on IEPs and sensitive documents without breaking protection protocols.
Eliminate Data Blind Spots: Leverage Content Explorer and Activity Explorer on a quarterly cadence to track high-risk data across SharePoint, OneDrive, and Teams, ensuring your future DLP strategy is grounded in real environment usage.
Phishing in K–12 succeeds because it exploits trust, not just technology. Messages that borrow the authority of a district leader, the urgency of a payroll or benefits notice, or the familiarity of a classroom tool consistently outperform technical defenses. Staff remain the foundation of this risk, but the same trust chain now reaches students. A single compromised staff account keeps its authentic address, contacts, and message history, which means the protections that close external student email do not close every path a trusted sender can travel. As AI makes these messages faster to produce and easier to personalize, the gap between filtering and human judgment is widening.
Drawing on anonymized data from CyberNut phishing simulations across more than 100 districts, this session examines how staff-targeted attacks work, how student-facing lures still arrive even in closed environments, and why the next step is moving from phishing training toward broader student cyber readiness that connects cybersecurity, digital and AI literacy, citizenship, and reporting.
In this session, we'll explore:
What CyberNut simulation data across 100+ districts reveals about how staff actually respond to phishing
How the same trust chain reaches students, even in districts that block external student email
Why AI is changing the scale, speed, and personalization of these attacks
How to move from phishing training to broader student cyber readiness, and five actions districts can take now