Cybersecurity for Regional and Local Governments and K-12 School Systems

Regional and local governments and K-12 school systems face increasingly complex cybersecurity challenges that must be addressed. Purdue cyberTAP will be your trusted partner for cybersecurity services. Our vast experience working with governments and schools, and world-class expertise in computer and data security provide a unique level of protection on which you and your citizens can rely. 

Trust Purdue to assist you in developing cybersecurity strategy, implementing controls, engaging vendors, building training, and building resiliency into your cybersecurity infrastructure.

Deliverables

• Cybersecurity assessment, compliance testing, policy & procedure development, workforce training
• Vulnerability scanning, penetration testing, configuration assessment, phishing simulation, password analysis
• Consulting and advisory services in all areas of cybersecurity

Resources

Executive Sessions on Cybersecurity for Local Government Officials by Network Solutions, Inc. Law Enforcement Cyber Incident Federal Reporting Guidelines:  A Unified Message for State, Local, Tribal, and Territorial Law Enforcement USDHS Cyber Resilience Review (CRR) Incident Management Guide USDHS Resources for State, Local, Tribal, and Territorial (SLTT) Governments

USDHS Cyber Security Evaluation Tool (CSET®) Free federal cybersecurity services, for more information or to request services Multi-State Information Sharing and Analysis Center Guide for Cybersecurity Event Recovery ICMA Survey Research: Local Government Cybersecurity Practices

Policies & Procedures Templates

These policies and procedures were developed under funding provided by a National Centers of Academic Excellence in Cybersecurity grant (H98230-21-1-0318), which is part of the National Security Agency.

 

Crosswalk:

NIST Cybersecurity Framework / Purdue cyberTAP Policy and Procedure Cross-Walk

Cybersecurity:

Application and Data Criticality  Authentication and Password Policy Cataloging External Information Systems Configuration Change Cybersecurity Continuity of Operations Plan Testing Policy Cybersecurity Incident Communication Policy Data Backup Data Security Electronic Data Integrity Control Electronic Information Transmission Security Employee Responsibility for Data Security Encryption Policy Endpoint Protection Policy Evaluation of Security Policies Information Security Risk Management Information System Activity Review Internet and Email Use IT Access and Physical Security Control IT Asset Management IT Supply Chain Risk Management IT System Maintenance IT User Access Revocation Procedure Least Privilege Protective Technology Mapping IT Communication and Data Flows Media Sanitization and Disposal Network Integrity Protection Network Security Continuous Monitoring Protection from Malicious Software Remote Access Policy Security Awareness Training  Security Incident Response Policy Software Patch Management Technical Safeguards Access Control (Password) Policy Use of Personal Mobile Devices Wireless Network Security