FCC Schools and Libraries Cybersecurity Pilot Program

What is the FCC Pilot Program?

In June 2024, the Federal Communications Commission (FCC) launched the Schools and Libraries Cybersecurity Pilot Program to gather the data needed to better understand whether and how universal service funds could be used to support the cybersecurity needs of schools and libraries.

To learn more about the Pilot Program, sign up for the mailing list or visit the Pilot Program’s website.

NCDPI 484 Form Guidance

NCDPI is releasing a guidance document for PSUs who are planning to apply for the FCC Cybersecurity Pilot Program.

Schools and Libraries Cybersecurity Pilot Program Application (FCC Form 484) Guidance from NCDPI

Recent Updates:

October 2024

Upcoming Training Webinars

Schools and Libraries Cybersecurity Pilot Program Overview for Service Providers
October 15, 2024 at 3 p.m. ET – Register

FCC and U.S. Department of Education Resource Recommendations

The FCC and Department of Ed. have collaborated to release a resource guide that aims to help schools and libraries evaluate their cybersecurity risks and
identify the most impactful cybersecurity solutions. The guide can also help schools and libraries as they complete applications for the FCC’s Schools and Libraries Cybersecurity Pilot Program and serve broadly as a resource for schools and libraries as they take steps to better protect their
networks.

A link to the guide can be found here.

K12 Six Form 484 Application Tips

K12 Six released the following tips for those who are filling out the Form 484 Application:

Q: Can you clarify what information you are looking for in Question 3.2, which asks whether an applicant or consortium member currently receives, or expects to receive, cybersecurity funding from any other federal, state, local, Tribal or other cybersecurity program or source? Is this question aimed toward the proposed Pilot funding that is being requested? Or does it relate to funding of any cybersecurity product or service?

A: This question will help the FCC better understand what other kinds of cybersecurity funding may be available to schools and libraries to pay for Pilot Program equipment and services and whether an applicant receives (or expects to receive) funding from another source that is, or will be, used to support the same equipment or services that are being requested through the Pilot Program.

For example, if an applicant is receiving funds to support cybersecurity equipment and services pursuant to the Infrastructure Investments and Jobs Act, and the funding is being used to pay for the same equipment or services that are being requested through the Pilot Program, it should answer in the affirmative for Question 3.2.

As the FCC has reminded applicants, Pilot participants are not precluded from using other sources of funding to pay for cybersecurity equipment and services (including for paying the non-discount share), but they may not receive Pilot funding for the same cybersecurity equipment and services, or the same portion of cybersecurity equipment and services, funded through other sources. FAQ 2.2)

Q: What is the difference between a recommendation and a best practice for purposes of answering Questions 2.1 and 3.4? Isn’t Question 2.1 a subset of Question 3.4?

A: For purposes of the FCC Form 484 Part 1, recommendations are broader than best practices, in that they reflect any cybersecurity guidance provided by the Education Department or CISA, not just guidance pertaining to K-12 schools and libraries. In that sense, best practices could be considered a subset of recommendations. To the extent an applicant has begun implementing any of the best practices identified by the Education Department or CISA, it may answer yes to both 2.1 and 3.4.

Q: Can you clarify the difference between Question 5.2 and 5.3 and how each may trigger the gift rule?

A: Question 5.2 asks whether a service provider will be required to include any no-cost cybersecurity equipment and/or services in its bid. Question 5.3 asks whether the applicant plans to require service providers to utilize any free or low-cost tools provided by Department of Education, CISA or other agencies.

Because free and low-cost tools are provided by the Department of Education, CISA, or another federal, state, local, or Tribal government source of funding, they do not raise the same competitive bidding and gifts restriction issues as no-cost cybersecurity equipment and services provided by service providers.

The free and low-cost tools referenced in this question are the same as those identified in Question 4.3.

Q: How will the budget of a school district or consortia be calculated if only a subset of its members are included in the FCC Form 484 Part 1 applications? For schools, will it be based on the actual number of students associated with the participating schools?

A: The budget will be based on the student count associated with the selected entities. The FCC has put together a Budget Examples resource guide to help applicants understand how budgets will be calculated.

September 2024

Webinar recording from E-Rate Central on Friday, September 13, at 10:30 AM to provide more detailed guidance on the specifics of this program and the application process.
Webinar recording: https://go.ncdpi.gov/CyberPilotWebinar
Webinar Slides: https://go.ncdpi.gov/CyberPilotSlides

FCC Cybersecurity Pilot Survey

NCDPI and the Friday Institute request your input on the topic of K-12 cybersecurity and the FCC Cybersecurity Pilot Program. Please take a few minutes to provide your thoughts so we can plan for the upcoming program, and determine what support DPI is best able to provide. Even if you are not participating in the FCC Cybersecurity Pilot, we ask that you answer these questions so we can gather data on this important topic.

Upcoming Training Webinars

Schools and Libraries Cybersecurity Pilot Program FCC Form 484 Part 1 Overview and FAQs
September 10, 2024 at 3 p.m. ET – Register

Schools and Libraries Cybersecurity Pilot Program FCC Form 484 Part 1 System Walkthrough
September 17, 2024 at 3 p.m. ET – Register

FCC Application Filing Window Public Notice

On September 4, 2024, the Federal Communications Commission released a public notice detailing the application filing window for the cybersecurity pilot program along with guidance for submitting the applications. Applications may be submitted between September 17 and November 1, 2024. For more information, view the document here.

August 2024

FCC Form 484 Part 1 Overview Webinar

On August 20, 2024, the Universal Service Administrative Co. (USAC) held a webinar where they reviewed the questions of the FCC Form 484 Part 1 to help applicants prepare to complete the form. The session focused on the form’s content and information collected. The slides presented during the webinar can be found here.

NCDPI Announcement

The DPI School Connectivity and PSU Cybersecurity would like to provide a couple of updates related to the FCC Schools and Libraries Cybersecurity Pilot Program. This pilot program aims to provide funding for eligible schools and libraries to improve their cybersecurity posture and protect their networks from cyber threats.

With the ever-increasing integration of digital technologies within the educational environment, cybersecurity continues to be an area of high importance, placing a significant responsibility on the PSU to secure their networks. Through the work of School Connectivity and PSU Cybersecurity programs, we have been able to leverage several resources and tools that provide high-quality protections for PSUs, but there is still work to be done in the effort to reach our goal of “helping all PSUs achieve basic cyber hygiene”.

Although many of the pilot’s details are still being determined, we wanted to share the following information and resources as we continue to build support and documentation to assist PSUs with the application process:

NCDPI does not plan to file any statewide/consortium applications for this pilot program.
There is currently no allocated funding to cover the non-discounted portion.
We are working with state and federal partners to identify applicable state master contracts that PSUs can leverage for individual applications.
A webinar hosted by E-Rate Central has been scheduled for Friday, September 13, at 10:30 AM to provide more detailed guidance on the specifics of this program and the application process. Registration for the webinar can be found on the DTL Eventbrite page here.
PSUs should continue evaluating their current cybersecurity posture in order to be prepared for the 484 application process.
The September DTL Digital Leaders Exchange will include several sessions on Data Privacy and Cybersecurity. You can register for a DLE event near you on the DTL Eventbrite page here.

Please reach out to Tim Wease – PSU Cybersecurity for anything related to this process. We look forward to partnering with you on this pilot program.

June 2024

Schools & Libraries Cybersecurity Pilot Program: Get Ready Webinar

On June 27, 2024, the Universal Service Administrative Co. (USAC) held a webinar where they provided a high-level overview of the Pilot Program and provided potential applicants with the steps to prepare for the application window. The slides presented during the webinar can be found here.