Skip to main content
NC School Connectivity Initiative

Cyber Hygiene Assessments

PSU Cyber Hygiene Assessment

Service Description

As PSUs implement cybersecurity program services and resources, it is crucial to continuously assess their cybersecurity posture. As part of the K-12 Cybersecurity Program, NCDPI is planning Cyber Hygiene Assessments (CHA) for PSUs on a three-year cycle through MCNC. The Vital Cyber Consulting team at MCNC will conduct a qualitative, standards-based assessment to evaluate each PSU’s adherence to the NC K-12 CORE strategy. Specifically, this process includes interviews with key PSU stakeholders to assess the implementation of selected Center for Internet Security (CIS) v8.1 Controls and Safeguards, focusing on 95 out of a total of 153 Safeguards. MCNC will analyze the assessment results to identify areas for improvement and provide prioritized recommendations aimed at enhancing and strengthening the cybersecurity posture of each PSU.

KEY TASKS AND DELIVERABLES

  1. Kickoff
    • MCNC will meet with PSU stakeholders to review the scope, plan, operations, and tasks of this engagement.
    • MCNC will establish an appropriate communication schedule during the Kickoff.
  2. Cybersecurity Program Review
    • MCNC will conduct a 2-3 hour interview session with PSU staff to evaluate implementation of NC K-12 CORE Safeguards.
    • MCNC will perform a gap analysis to determine where Safeguards are implemented, partially implemented, or not implemented.
    • MCNC will document its assessment observations, findings, and develop prioritized recommendations.
  3. Engagement Closeout
    • MCNC will deliver a detailed report of assessment observations, findings, and prioritized recommendations.

Key Benefits

  • Defines and supports a holistic PSU cybersecurity strategy
  • Assess implementation of cybersecurity best practices
  • Identify gaps in security posture and evaluate weaknesses
  • Provide actionable, prioritized cybersecurity recommendations

Cost to PSUs

No cost – funded by NCDPI K-12 Cybersecurity Program on a 3 year cycle

PSU Time Commitment

Upfront: 3-5 hours

How to get this service

PSUs are automatically enrolled and will be contacted accordingly.

Point of Contact

Name: Jason Shirley, MCNC Vital Cyber Consulting
Email: [email protected]

Key Resources