Plug in your goals.
State legislation, insurance requirements, personal ambitions. Add them as goals, and every control you evidence counts towards the goals it belongs to, all at once.
- One control can count towards several goals at once
- Watch progress against each goal as evidence lands
- Lock in your progress
Two ways to audit.
Use one, the other, or both. The audit adapts to your district. Not the other way round.
Control-by-control
Ten minutes at a time. Nothing skipped.
- Work through controls between tickets, not in one marathon session
- Delegate sections. Network questions to your network lead, training to whoever owns it
- Pick it up where you left off
- Easy to schedule regular progress
- Something changes? Re-audit one control, not the whole audit
- Complete coverage your board can see. Every control, assessed
Conversational
Talk it through. The auditor does the rest.
- Answer questions the way you'd answer a person. One session, about an hour
- Skips what doesn't apply to your district, digs deeper where it matters
- No interpreting control language - the auditor asks the clarifying question: "Does that MFA rollout cover any student grades?"
- Your context, constraints, and half-finished projects make it onto the record
- Surfaces the gaps you didn't know to mention
Bring your own phishing simulator.
Keep the tools your staff already know, and see their results in the wider context of your cybersecurity effort. Human risk stops being a separate report and becomes part of the same picture as your controls.
- Data from all your phishing simulation and awareness tools in one place
- Retain your campaign data, even if you change providers in future
- Better understand and interpret your results
- Level-up and K-12ify your current phishing simulator
Reporting whenever you need it.
Generate reports across your whole cybersecurity effort whenever you need them. Cabinet meeting on Thursday? Insurance renewal next month? The platform becomes your knowledgebase, so you stop entering the same information into questionnaire after questionnaire.