Get Full Government Meeting Transcripts, Videos, & Alerts Forever!
Get email alerts on the Cybersecurity topic
No spam. Unsubscribe anytime.
Board asks how ransomware would be handled as cyber premiums rise
Summary
Board members sought clarity on ransomware coverage, escalation and notification procedures after hearing that the district maintains high cyber coverage contingent on following security protocols; staff said insurers cover ransomware if protocols are met and the superintendent and board would be notified promptly.
Questions from board members focused on whether a cyber‑security incident involving ransomware would require Board of Finance involvement in payment or notifications. The superintendent (Chris) told members the district carries what he described as a high level of cyber coverage and that, provided required security protocols and staff training are in place, the insurance policy would cover ransomware incidents.
Chris said the district uses an independent cybersecurity firm to provide phishing tests and compliance reporting and that staff receive annual training; he added that backups are now in the cloud, which limits exposure. In response to a direct governance question, Chris stated he would notify the board and town officials immediately if an incident occurred and that, in a worst‑case ransom scenario, payment decisions would be escalated to district leadership and appropriate boards.
Why it matters: Cyber incidents can cause operational disruption, financial exposure, and require rapid decisions about disclosure and payment. Board members requested regular compliance reports from the cybersecurity vendor and clarity on which board (Board of Finance or Board of Education) should be formally notified in each escalation scenario.
