State to audit Ohio school districts cybersecurity plans

pppGet the best experience and stay connected to your community with our Spectrum News app Learn Morepp
Continue in Browser
ppGet hyperlocal forecasts radar and weather alertsppPlease enter a valid zipcodeppSaveppCLEVELAND  The Ohio Auditor of States Office will begin evaluating school districts cybersecurity policies in July ppAs outlined by House Bill 96 districts had to implement a cybersecurity program that safeguards the districts data information technology and information technology resources to ensure availability confidentiality and integrity ppThe law reads The program shall be consistent with generally accepted best practices for cybersecurity such as the national institute of standards and technology cybersecurity framework and the center for internet security cybersecurity best practicesppWithout the standards without the prevention they were opening themselves all too often to cyberattacks Ohio Auditor of State Keith Faber said in an August social media post ppCleveland Metropolitan School Districts Lou Marich is at the front line of data protection As the Executive Director of Cybersecurity and IT Risk Management hes in charge of not only securing district data but ensuring the district complies with state law ppI feel my job is important because you know its all about the children Marich said We are protecting student data parents data our own data as well And theres a market for compromised data So I feel my job is to protect thatppThis year the CMSD cybersecurity team was honored by CSO a cybersecurity publication as a CSO Hall of Fame Award Recipient for 2026 ppWere in there with some big heavyhitters Marich said United Airlines and McDonalds DocuSign is in there Theyre all industry leaders the gold standard in how to protect your environmentsppCMSD was recognized for its measurable results since partially implementing its cybersecurity plan The district reports a 20 reduction in geotargeted threats a 28 reduction in phishing and ransomware attacks and 950000 in savings ppIn addition the district reports that it meets the new State of Ohio data protection privacy and cybersecurity requirements with no additional actionp