Monroe County schools outline layered cybersecurity plan, report 17,103 blocked email attacks in January

The Monroe County School District’s technology team told the school board on Feb. 10 that a layered cybersecurity approach is central to keeping student data and instruction safe, and that the district’s email defenses stopped 17,103 suspicious messages in January alone.

In a presentation, Mr. Laffir, the district IT presenter, said the district employs multiple protections—endpoint protection, email threat reduction, content filters and a security information and event management system—to reduce the chance of a breach. “Cybersecurity is a core operational responsibility for the district,” he said, adding that the tools “are blocking these attacks before they reach inboxes.”

Why it matters: School networks hold sensitive student and staff information and are frequent targets for phishing and social engineering. The district’s approach aims to limit disruptions to instruction and reduce recovery costs.

Laffir described the role of specific products: SentinelOne for endpoint detection and containment; Abnormal AI for automated email threat removal; iBoss and Palo Alto for content filtering at device and network levels; and Arctic Wolf as the district’s SIEM. He said Abnormal AI “automatically removes malicious messages or emails before users even see them” and that combining those tools supports compliance with NIST guidance.

Board members pressed staff on several operational points during the question-and-answer session. A newly regenerated January report showed nine attack categories instead of eight; staff said the added category was “gray mail” (unwanted marketing/advertising) and offered to compare prior reports and follow up with additional detail. On whether iBoss can identify the individuals responsible for bullying, Laffir said the system generates reports and dashboards that are being integrated into intervention workflows.

Budget context: Laffir reported adjustments to the district capital plan, from an original approved capital budget of $4,790,000 to $5,380,000, and said roughly $2,290,000 remains to be spent this fiscal year on software renewals and planned projects. He said the district expects about $237,000 in capital funds remaining at year-end after planned allocations. The presentation also outlined E‑Rate funding the district will pursue; as an example, an Internet/WAN expense of $524,000 was reduced to $137,000 after E‑Rate discounts.

What comes next: Staff said they will return with additional details on the January attack-type comparison, clarify the number and role of phones covered by a move to cloud telephony, and follow up on whether specific grants or federal programs could be pursued to supplement E‑Rate funding.

At the meeting’s close, board members thanked IT staff for the report and asked staff to return with more detailed project and budget reviews.