Federal Government Resources

Federal reports, guidance, and programs directly related to K-12 cybersecurity issues, organized by agency. NOTE: K12 SIX-hosted links to PDF resources are provided where available.

Cybersecurity & Infrastructure Security Agency (CISA)/U.S. Department of Homeland Security

• ‍Cybersecurity for K-12 Education: ‍https://www.cisa.gov/topics/cybersecurity-best-practices/K12cybersecurity

• SchoolSafety.gov: a one-stop-shop for federal school safety resources, programs, and actionable recommendations for creating a safe environment where students can thrive

• Guidance: K-12 Cybersecurity Foundations (8/2026): https://www.cisa.gov/topics/cybersecurity-best-practices/K12cybersecurity/foundations

  • Getting Started Guide: https://www.cisa.gov/resources-tools/resources/k-12-cybersecurity-foundations-getting-started-guide | PDF

  • Implementation Guide: https://www.cisa.gov/resources-tools/resources/k-12-cybersecurity-foundations-implementation-guide | PDF

• Report: “Protecting Our Future: Partnering to Safeguard K-12 Organizations from Cybersecurity” (1/2023): https://www.cisa.gov/topics/cybersecurity-best-practices/K12cybersecurity/protecting-our-future-cybersecurity-k12 | PDF

• Guidance: Cybersecurity Guidance for K-12 Technology Acquisitions (8/2023): https://www.cisa.gov/resources-tools/resources/cybersecurity-guidance-k-12-technology-acquisitions | PDF

• Guidance: Cross-Sector Cybersecurity Performance Goals: https://www.cisa.gov/cross-sector-cybersecurity-performance-goals/cross-sector-cybersecurity-performance-goals

• State and Local Cybersecurity Grant Program https://www.cisa.gov/cybergrants/slcgp

• Cyber Incident Reporting for Critical Infrastructure Act of 2022 (CIRCIA) https://www.cisa.gov/topics/cyber-threats-and-advisories/information-sharing/cyber-incident-reporting-critical-infrastructure-act-2022-circia

Federal Communications Commission (FCC)

• Schools and Libraries Cybersecurity Pilot Program https://www.fcc.gov/cybersecurity-pilot-program

National Institute of Standards and Technology/U.S. Department of Commerce

• NIST Cybersecurity Framework: https://www.nist.gov/cyberframework

U.S. Department of Education

• K-12 Cybersecurity Government Coordinating Council (GCC): https://www.ed.gov/teaching-and-administration/safe-learning-environments/school-safety-and-security/k-12-cybersecurity/k-12-cybersecurity-government-coordinating-council-gcc

• K-12 Cybersecurity: https://www.ed.gov/teaching-and-administration/safe-learning-environments/school-safety-and-security/k-12-cybersecurity

• Guidance: K-12 Digital Infrastructure Brief: Defensible & Resilient (8/2023) https://eric.ed.gov/?id=ED650652 | PDF

• Guidance: Cybersecurity for K-12 Schools and School Districts: Developing a Cyber Annex: https://www.ed.gov/media/document/rems-k-12-schools-and-school-districts-developing-cyber-annex-fact-sheet-508c-2023-113278.pdf | PDF

• Guidance: Ransomware Attacks and the Importance of Collaboration in District-Level Cybersecurity Risk Management: https://www.ed.gov/media/document/rems-k-12-ransomware-attacks-and-importance-of-collaboration-district-level-cybersecurity-risk-management-2024-113457.pdf | PDF

• Student Privacy Policy Office – Privacy Technical Assistance Center https://studentprivacy.ed.gov/

U.S. Government Accountability Office

• Report: Data Security: Recent K-12 Data Breaches Show That Students Are Vulnerable to Harm (GAO-20-644) (9/2020) | PDF

• Report: Critical Infrastructure Protection: Education Should Take Additional Steps to Help Protect K-12 Schools from Cyber Threats (GAO-22-105024) (10/2021) | PDF

• Report: Critical Infrastructure Protection: Additional Federal Coordination Is Needed to Enhance K-12 Cybersecurity (GAO-23-105480) (10/2022) | PDF