Get Full Government Meeting Transcripts, Videos, & Alerts Forever!
Get email alerts on the Cybersecurity topic
No spam. Unsubscribe anytime.
CSISD reviews cybersecurity posture and proposed managed‑detection partnership with Texas A&M
Summary
District technology staff briefed trustees on current cybersecurity defenses and a proposed managed detection and response partnership with Texas A&M; staff said the service would add continuous monitoring and incident response for roughly $5,000 more than the district’s current, in‑house arrangement.
College Station Independent School District technology staff presented a status report on district cybersecurity and outlined a proposed managed detection and response partnership with Texas A&M’s cybersecurity operations team.
The report described existing protections — a district firewall, E‑Rate required content filter, segmented networks, endpoint detection and response, patch management and user training — and said the district relies on external partners for specialized capacity. “The Internet is a wonderful tool. We encourage it. We use it,” a district staff member said, adding that “it also brings some perils that we have to deal with.”
Texas A&M representatives described the services they would provide if the district adopts a formal agreement: continuous monitoring, threat detection and analysis, endpoint agents on devices, incident response and access to systemwide threat intelligence. Michael Esparza of Texas A&M’s cybersecurity leadership team said the arrangement would give CSISD a “next generation team of cyber operators” able to detect and respond to threats the district cannot staff for locally.
District staff and Texas A&M both emphasized ransomware and state‑sponsored activity as leading concerns for schools. Esparza said the managed service reduces alert fatigue for local staff by triaging and investigating alerts before forwarding confirmed incidents to district personnel. The district presenter said the service would be “a little bit more” than current expenditures — roughly $5,000 more annually for full managed monitoring and response — but would provide 24/7 coverage and faster incident notification during holidays and weekends.
Board members asked about specific problems the service would address, including email delivery and spam filtering; district staff said those problems are related to a separate project but that the managed service and associated training would help reduce spam and improve filtering. Trustees also asked about third‑party payment processing and liability for concessions and ticketing; Texas A&M and district staff said cloud providers handle PCI compliance and that the district primarily provides network connectivity to those services.
No formal action was taken during the workshop. District staff said the Texas A&M partnership appeared on the agenda for the regular board meeting that followed and that the board would have an opportunity to approve any contract at a subsequent meeting.
The district said it will continue independent vulnerability audits and planned additional user training (with gamification and dashboards) and is examining AI guardrails for staff use.
Ending: Trustees welcomed the presentation and asked staff to provide contract terms and cost comparisons in time for the regular‑meeting agenda where action is expected.
