From EdTech Compliance to Evidence-Based Assurance
K-12 data breaches are increasingly making headlines, and school districts are looking for stronger assurance that an edtech vendor is capable of protecting their students’ data. Meanwhile, states are looking more at existing cybersecurity standards, sometimes requiring different ones that other states, creating a patchwork for vendors to comply with.
To address both, A4L developed the Global Education Security Standard (GESS), which is a crosswalk of the major cybersecurity standards with controls specifically chosen for the K-12 sector. In this webinar, we will introduce the GESS audit framework and methodology. Vendors will learn what to expect if they want to receive a GESS assessment, and school districts will learn what it means when a vendor has received a GESS certification.
Moderator:
David Sallay, A4L Community
Panelists:
Veli Hillman, EDDS Institute
Matthew Demicoli, EDDS Institute
Key Takeaways:
- What GESS is and how it differs from other assessments
- The thinking behind turning the framework into assessments
- What a GESS assessment will look like from a vendor's perspective
- Next steps, including pricing and how to get involved
Target Audience: School district staff involved with app vetting (particularly with a security focus), edtech staff involved with data governance and cybersecurity