Cybersecurity Resources

This page will house cyber security resources for PACE members. It will be continually updated with relevant resources, so check back to see what is new!

Cybersecurity Grant

Cyberattacks against organizations across the world have grown in frequency, severity and sophistication. Nationwide, educational institutions have proven to be especially vulnerable. Over the past two years, PACE has helped its members be more prepared for such attacks by requiring certain cybersecurity measures be in place to qualify for the AIG cyber coverage offered to members. While these requirements help protect PACE trust dollars by mitigating claims, the goal is to simply protect PACE members from attacks so that they can continue to deliver the quality services the public expects of them.

PACE is pleased to announce a new grant program to help offset some of the cost of implementing cybersecurity tools or services. Each PACE member is now eligible for a grant of up to $500 to implement one or more of the cybersecurity measures listed below.

Email pace@osba.org for a link to the application. 

Vector Solutions

• PACE has worked with Vector Solutions to give you access to cyber security resources and trainings. 
• Email pace@osba.org to gain a login to SafeSchools or SafeColleges.
• You can also visit our Trainings page for more resources and tutorials.

New! Cybersecurity Courses

• Cybersecurity Awareness for Employees: Social Engineering
• Cybersecurity Awareness for Employees: Security Awareness Essentials

• Cybersecurity Awareness for Business Leaders: Safeguarding Against Social Engineer Attacks 
• Cybersecurity Awareness for Business Leaders: Incident Preparedness and Management Planning

• Browser Security Basics
• Cybersecurity Overview
• Email and Messaging Safety
• Password Security Basics
• Protection Against Malware

And more!
Login to your SafeSchools/SafeColleges account to  or email pace@osba.org to sign up.

In addition, PACE is requiring cyber training to access PACE’s Cyber coverage 2022-2023 year.

Required courses below:

1. Commit to requiring staff and administrative staff to take "cyber training" by June 30, 2023
• Staff:  SafeSchools or equivalent
• Cybersecurity Awareness for Employees:  Security Awareness Essentials
• Cybersecurity Awareness for Employees: Social Engineering
•    Administrators: SafeSchools or equivalent
• Cybersecurity Awareness for Business Leaders: Safeguarding Against Social Engineer Attacks 
• Cybersecurity Awareness for Business Leaders: Incident Preparedness and Management Planning

Templates

Please pick the template with elements that best suits your organization. Email underwriting@sdao.com with any questions!

Sample Incident Response Plan 1

Sample Incident Response Plan 2

Sample Incident Response Plan - Small Businesses

Webinars:

General Cybersecurity Awareness and Best Practices

Cybersecurity is everyone’s responsibility. This training will explore the current cybersecurity threat landscape and prepare members and end users in protecting their corporate environment and stakeholders by employing best practices across their IT environment. Examples of training topics include the following:

·    Asset management – knowing what to secure
·    Identifying suspicious emails and activity
·    Utilizing proper security tools
·    Safe internet habits and email best practices
·    How to respond to an incident
·    Secure password best practices

Slide deck

Recording:

 

Cybersecurity Framework

This webinar will cover:
- Cybersecurity frameworks with a focus on the CIS v8 Controls
- Choosing the correct framework to measure cybersecurity posture
- Cyber hygiene
- Establishing benchmarks for measuring cybersecurity growth and maturity

 

Informational Articles

• Cybersecurity Best Practices - Start at the Top, Build a Culture of Security - Published by MII, 2022
• Cybersecurity and Infrastructure Security Agency (CISA) 
• Learn more for Region 10 (Northwest Sector)