District recommends vendor for internal penetration test; $40,000 budgeted, board action scheduled next week

Mister Webb, technology staff, briefed the committee on cybersecurity and infrastructure work, including a recommended vendor for the district’s internal penetration test (pen test) gap analysis and an evaluation of a new service-management system.

Webb said he solicited three vendors under PA COSTARS and recommends ePlus based on reference checks, cost and past work with Chester County districts. The pen test scope would run about 10 days across day and after-hours windows; the district budgeted $40,000 in the 2024–25 technology budget for the work. Webb said the district would conduct the test in early April if the board approves the recommendation at next week’s regular board meeting.

On infrastructure, Webb said the district is purchasing network equipment now because summer lead times are growing and potential tariff changes could increase costs; a network design is complete and staff expect to finish physical work and testing with the intermediate unit in March.

Webb also summarized the district’s evaluation of a service-management system to replace a current corporate-focused vendor. He said the district researched two new vendors and its current vendor to find a tool better tailored to K–12 needs, including connectors to Google, Jamf and PowerSchool; Webb said any contract for a new system would require board action and is expected to produce cost savings compared with the current system.

No formal contract was executed at the CIT meeting; Webb said he will present the pen-test vendor recommendation for board action next week and provide a follow-up presentation on service-management procurement.