Board approves $97,500 for network segmentation licensing after 2023 cyber incident

The Hillsborough County School Board voted unanimously on April 8 to approve $97,500 in licensing for network segmentation technology (agenda item 10-01), a cybersecurity control district staff said would limit attackers’ ability to move laterally through internal networks.

District IT staff described the purchase as part of the district’s Recovery Forward plan following a 2023 cyber incident. Network segmentation creates virtual barriers so that systems that do not need access to critical data cannot reach it directly. IT staff said the purchase is a layer in a broader, multi-pronged security effort that also includes data-loss prevention (DLP), improved backups and identity-protection measures.

Why it matters: The district manages student records, payroll and other sensitive information. Staff said protecting identity and financial data requires layered defenses and ongoing monitoring; trustees asked for more regular briefings on the overall security posture as the district integrates new systems.

Discussion highlights - Staff noted the purchase is only one element of district security and that a fine balance must be struck between usability for staff and security protections for critical systems. - Board Member Rendon asked for an umbrella briefing on districtwide security measures and how licensing fits with other investments; IT staff agreed to provide a more comprehensive update for the board in a closed or redacted setting as appropriate to protect security details.

Board action Member Rendon moved approval of C10-01; Member Combs seconded the motion. The motion passed unanimously.

Next steps IT and security staff said they will pursue data-loss protection pilots and identity-protection measures next and continue discussions about contracting with security operations centers to support ongoing monitoring.