DPO Download

Latest Episodes:

Episode 41 - Navigating Cyber Insurance for School Districts: Key Risks, Essential Controls, and Policy Pitfalls Sep 02, 2026

Show notes

In this episode of The DPO Download, our hosts welcome risk advisors Nick Spencer and Scott Garcia from Smith Brothers Insurance to discuss the evolving landscape of cyber security insurance in K-12 school districts. The panel explores how cyber threats have shifted from simple data theft to sophisticated extortion schemes. The guests detail the critical shift from standard policy add-ons to dedicated, standalone cyber coverage, highlighting the core security controls underwriters require today—such as multi-factor authentication (MFA), data encryption, patch management, EDR, and air-gapped backups. Additionally, they examine common policy limitations like sub-limits and exclusions, offer practical advice on policy reviews and third-party vendor management, and share real-world anecdotes that underscore the importance of proactive risk management in education.

Episode 40 - Unpacking NIST 2.0 with the RIC One DPSS Team Aug 05, 2026

Show notes

In this episode of The DPO Download, our hosts are joined by RIC One DPSS team members Ashleen Speen and Keith Schubert to unpack a major shift in New York State Ed Law 2-D compliance: the transition from the NIST Cybersecurity Framework 1.1 to version 2.0. Together, the panel explores how NIST 2.0 brings governance to the forefront of district leadership and how the team developed new, tiered community profiles (Critical, Core, and Comprehensive). Our guests highlight the collaborative effort behind RIC One’s newly released gap assessment and reporting tool, while sharing practical strategies for prioritizing risk, tracking evidence, and building long-term cybersecurity maturity—reminding listeners that when it comes to data privacy, no district has to go it alone.

Episode 39 - Vibe Coding and NYS Cybersecurity Conference Jun 24, 2026

Show notes

Our hosts share key takeaways for school districts from the 2026 New York State Cybersecurity Conference. Listen in as they dive into new developments in AI prompting, data privacy, and the growing trend of educators "vibe coding" applications for their classrooms. Finally, learn about the critical privacy concerns all School District Data Protection Officers should consider when addressing staff members and AI-generated code.

Episode 38 - Cybersecurity Annex and AI Threats Jun 03, 2026

Show notes

On this episode our hosts revisit a interview with Hilary Hofstein, Managing Program Coordinator for Health, Safety, and Risk at Capital Region BOCES on the Cybersecurity Annex a component of school districts' Building Level Emergency Response Plans in New York. Hofstein provides a deep dive into the annex, describing it as a vital "cheat sheet" or quick guide that outlines essential protocols and key personnel for digital crises. Our hosts also address the newest developments in AI-driven phishing techniques—such as "device control flow" attacks—currently targeting New York schools.

Episode 37 - 2026 RIC one DPSS Conference Apr 15, 2026

Show notes

Join our hosts live at the 2026 RIC one Data Privacy and Security Conference. Listen as we hit the conference floor to catch up with district leaders and IT experts, diving deep into the breakthrough insights and "aha" moments they’re taking back to their schools.

Episode 36 - Navigating AI Guidelines and Launching a Cybersecurity Academy Mar 18, 2026

Show notes

In this episode of the DPO Download our hosts speak with Eric Coronado, Director of Technology for the Suffern Central School District, to explore how his district is embracing cutting-edge technological initiatives. Eric shares how his team proactively addressed the rapid rise of artificial intelligence by collaborating with teachers to create a "green, yellow, and red light" framework for AI tools, ensuring a delicate balance between classroom innovation and strict student data privacy. Additionally, he details the launch of a pioneering three-year cybersecurity academy at Suffern High School.

Episode 35 - Beyond the Silos: How HR and IT Collaboration Revolutionized District Security Feb 11, 2026

Show notes

In this episode, our hosts sit down with leadership from the Burnt Hills-Ballston Lake Central School District—Superintendent Patrick McGrath, Director of Technology Doug Carlton, and Assistant Director of Technology Michael Steinberg. They discuss the district’s strategic shift toward a unified vernacular across departments, a move that enabled the implementation of automated user provisioning reaching all the way to the physical security layer.

Listen as we explore how the district successfully leveraged administrative regulations and a culture of shared decision-making to streamline onboarding processes. By reducing IT overhead and enhancing data privacy in alignment with NIST 2.0 standards, this team provides a roadmap for modernizing school district operations.

Episode 34 - Cybersecurity as a Team Sport: Governance, Response, and Strategic Planning for K12 Schools Nov 05, 2025

Show notes

On this episode we welcome former Chief Information Officer at Pittsford Central School District Dr. Jeff Cimmerer to the podcast. Listen as Dr. Cimmerer speaks about how cybersecurity is very much a team sport. Learn how using common nomenclature can help reach a variety of stakeholders within your district.

Episode 33 - School Year Readiness, and Collaboration Sep 10, 2025

Show notes

This episode we are joined by Data Protection Officers Brian Zimmer of Webster CSD, John Miller of Honeoye Falls-Lima CSD, along with Dan Fullerton of Monroe Regional Information Center (RIC) to speak about the opening of a new school year. Listen as we discuss how collaboration plays a critical role among the Monroe RIC region by emphasizing standardized practices, shared hardware, and mutual support so no one goes at it alone.

Episode 32 - How to Handle Zero Day Threats Aug 06, 2025

Show notes

What happens when hackers find a flaw before the developers do? They get a Zero-Day—a golden ticket into networks worldwide.

Join our hosts along with NERIC's Information Security Manager Don Harple as we discuss the recent zero day Microsoft SharePoint Vulnerability. Learn as we discuss best practices for zero day threats as well as speak to the benefits of exercising your incident response plan.

Our TOPPODCAST Picks

Follow Us

Stay Connected

Related Podcasts

Links

Stay Connected