Board votes to shut TV‑3 after IT report finds critical vulnerabilities
Get AI-powered insights, summaries, and transcripts
Subscribe
Summary
Following an IT vulnerability scan that identified critical security flaws in the Tightrope software that runs TV‑3, the board voted unanimously to decommission the channel and cease TV‑3 operations, citing imminent cybersecurity risk and available live‑streaming alternatives.
The Portland Board of Public Education voted Nov. 25 to cease operations of TV‑3 after district IT presented an external security review showing multiple critical vulnerabilities in the Tightrope application that serves on‑channel playback.
Brian Newcomb, the district’s director of information technology, told the board an external vulnerability scan identified 16 critical and high findings; his team remediated seven but two high vulnerabilities require outside help. The Tightrope application has seven critical vulnerabilities in the district’s assessment and vendor support has expired. Newcomb recommended decommissioning the service to prevent a potential lateral network breach or ransomware attack.
“My recommendation is to improve your security posture, shut down TV‑3 immediately,” Newcomb said. Staff also presented two less urgent options: invest approximately $17,100 to replace and support the platform with ongoing maintenance costs, or outsource AV and transmission to a vendor at higher cost.
Board members asked about alternatives to preserve meeting access. Staff said meetings will continue to be livestreamed to Facebook and uploaded to YouTube, and that communications staff can post event recordings. The board voted to bypass a second read and then voted unanimously to approve the cease‑operations motion.
What’s next: IT will begin decommissioning the Tightrope servers. Staff said communications channels (Facebook, YouTube) will be used for meeting video and the district will consider whether to fund future recording or posting capacity during budget planning.