Board authorizes $12,000 penetration test and accepts Idaho National Guard audit option

The Lakeland District Board of Trustees authorized a district cybersecurity assessment that includes a paid penetration test and a separate free security audit from the Idaho National Guard.

Chuck Carson, technology director, described two different but complementary offerings: an expedited external penetration test (estimated cost $12,000) that attempts to emulate an attack and identify exploitable gaps, and a Department of Defense-funded Idaho National Guard security audit that provides on-site evaluation but is booked several months out. "One's penetration testing, and one's more just security audit in general," Carson said, and he recommended pursuing both options because each produces different, useful findings.

Trustees discussed scheduling and funding. The board voted to approve contracting for the $12,000 pen-testing option as soon as possible (the technology team preferred August before the school year) and to pursue the National Guard audit when the Guard’s schedule permits. The CFO said the likely accounting would be to code the expense through technology and that the cost is an investment compared with potential breach remediation expenses.

Carson noted the National Guard audit is a grant-funded option that "is funded by the Department of Defense." The board instructed staff to proceed with both audits and return findings to the board when available.