Schools and Libraries Cybersecurity Pilot Program Guide

cybersecurity pilot program

Do you feel like your school or library has the cybersecurity it needs to stay protected from potential threats? With the increasing reliance on technology in education and information services, it’s more important than ever to have proper cybersecurity measures in place.

The FCC Schools and Libraries Cybersecurity Pilot Program aims to address the growing pressure of cyberthreats by providing much-needed funding for cybersecurity measures. Is your school eligible to be part of this program and receive the necessary assistance? Let’s dive into the specifics of the program and how it can benefit your institution.

The Growing Need for Cybersecurity in Schools and Libraries

In recent years, there has been a notable rise in cyber attacks targeting educational institutions and libraries. From ransomware attacks that lock down entire IT systems to phishing scams that steal sensitive information, the threat landscape is becoming more complex and dangerous.

Merced County Schools is a recent victim of a cyberattack, costing thousands of dollars to get back on track.  An attack on the Minneapolis Public Schools in 2023 may have impacted over 100,000 people. Research shows that the amount of reported cyberattacks on K-12 schools doubled from 2022 to 2023.

What Impact Do These Attacks Have?

Schools hold very private information—data that could hurt students’ and employees’ financial prospects, or even their physical safety. Cybercriminals may steal personal data that can be used for identity theft (SSNs, addresses, phone numbers) and to obtain credit card accounts for fraudulent purchases. 

Elementary through high school-age students are particularly vulnerable to victimization by cybercriminals because they generally have not established solid credit histories until after graduating from college.

Furthermore, schools and libraries often store sensitive information about students’ academic progress, medical records, and disciplinary history. A breach in this data can result in severe consequences for the students and the institution as a whole.

What Is the Cybersecurity Pilot Program?

The Schools and Libraries Cybersecurity Pilot Program is designed to evaluate the effectiveness of using Universal Service funding for cybersecurity. The program will provide up to $200 million over three years to eligible participants. Its goal is to protect school and library broadband networks and data from cyber threats.

Funding and Duration

The program allocates $200 million over a three-year period. This funding is aimed at purchasing a wide variety of cybersecurity services and equipment to enhance the security posture of participating institutions.

Eligibility and Application Process

Who Can Apply?

Schools, libraries, and consortia of these institutions that meet the E-Rate program’s eligibility requirements can apply. This includes public and private schools, tribal libraries, and academic libraries. You do not need to be a former or current participant in E-Rate funding to apply.

Learn more about E-Rate eligibility here and here!

Application Process

The application process is divided into two parts:

Part One

Applicants must provide general information about their institution, the proposed cybersecurity project, and the services or equipment requested. This includes a description of the goals and objectives to be achieved and the cybersecurity risks the project aims to address.

Part Two

Applicants need to detail their current cybersecurity posture, history of cyber threats, and existing cybersecurity policies. This section helps assess the institution’s readiness and needs for enhanced cybersecurity measures.

Key Dates and Deadlines

The application window opens this Fall. Key dates for submitting applications and other relevant milestones will be provided by the FCC. It’s crucial to mark these dates and prepare your application accordingly to ensure timely submission. ANC Group can provide a free assessment that will enable you to understand the as-is state of your cybersecurity as well as helping you identify gaps.  This will be crucial to the first step of the application process for the cybersecurity pilot. 

Selection and Participation

The FCC will select participants based on several factors, including size, location, and demonstrated need. There is a particular emphasis on supporting low-income and Tribal applicants to ensure equitable access to cybersecurity resources.

Eligible Services and Equipment

What IT services will be available as part of the Cybersecurity Pilot Program?

Advanced/Next Generation Firewalls

Firewalls are essential for protecting network boundaries. Advanced features like AI/ML threat detection, intrusion prevention systems, and DDoS protection are included.

Endpoint Protection

Protecting individual devices is critical. Services include anti-malware, anti-ransomware, and endpoint detection and response (EDR).

Identity Protection and Authentication

Securing user identities and credentials is a priority. Multi-factor authentication (MFA), identity governance, and secure access service edge (SASE) are among the eligible services.

Monitoring, Detection, and Response

Continuous monitoring and quick response capabilities are vital. Security operations centers (SOC) offering 24/7 monitoring, vulnerability management, and threat intelligence are covered.

See the full list of covered IT services here.

How Can Your School Stay Compliant While Participating?

Participants must adhere to strict compliance requirements to ensure accountability and effective use of funds.

Document Retention

Maintaining thorough records and documentation is crucial for audits. Institutions must keep detailed records of their activities and expenses related to the program.

Competitive Bidding

A fair and transparent competitive bidding process is required to select service providers. This ensures that participants receive the best value for their investments.

Audit Requirements

Participants will be subject to audits to verify compliance with program rules. Preparing for these audits involves keeping precise records and being ready to demonstrate adherence to program guidelines.

Keep Your Data Safe With ANC Group

Cybersecurity is no longer optional for schools and libraries; it is a necessity. The Schools and Libraries Cybersecurity Pilot Program offers a unique opportunity to enhance the security of these vital institutions. By participating, schools and libraries can protect themselves against cyber threats, safeguard sensitive information, and ensure continuity of education and services.

For personalized guidance and support, consider connecting with an E-Rate consultant or reaching out directly to USAC or the FCC.

When you’re ready to get started with these IT services, ANC Group is here to help! We’ve helped schools and libraries secure their networks and data for over 20 years. Contact us today to learn more about how your school can become safer and more efficient.