New York's K-12 Tailored Cyber Risk Solution
Simplified Compliance, Amplified Security!
That’s why we built a smarter, simpler way to help New York districts stay secure and compliant—without the stress or the high price tag. Peace of mind is now practical. Get the tools, guidance, and protection your schools need, all in one easy-to-use platform.
New York's students and staff deserve uncompromised and sustainable cybersecurity
Laws & Regulations
Federal
OMB UGG Final Revision 200.303(a)-(e)
If administering federal awards, establish/document/maintain effective internal controls and take reasonable cybersecurity and other measures to safeguard information
Confidentiality of education records; annual notices; access controls; disclosure logs; staff training
Notice/consent for certain surveys, marketing, or sensitive data collection
Notice/consent for certain surveys, marketing, or sensitive data collection
Internet safety policy; content filtering & monitoring; online safety/cyberbullying education
Treat school health records under FERPA; define exceptions
Technical, physical, and personnel controls; audits; training for districts with police presence
State
Data Security & Privacy – Adopt a Data Security & Privacy Policy consistent with the NIST Cybersecurity Framework; appoint a Data Protection Officer (DPO); publish a Parents’ Bill of Rights; require Data Security & Privacy Plans in every third‑party contract; provide annual training; implement breach/incident response and required notifications.
Breach Notification for state agencies & local governments – Notify affected NY residents without unreasonable delay after a data breach; notify NY Attorney General, Dept. of State, and State Police; coordinate with timing allowances for law enforcement.
SAVE Act – District‑wide & Building‑level Safety Plans – Adopt/annually update district and building‑level emergency response plans; conduct required drills; submit/retain plans per NYSED guidance; include provisions for communication, cyber/IT dependencies, and coordination with first responders.
Behavioral Threat Assessment & Management (BTAM) – Establish/operate BTAM teams with law‑enforcement partnerships; adopt procedures; train team members; document assessments and interventions; align with student privacy laws.
Dignity for All Students Act (DASA) – Implement policies, training, and instruction addressing harassment, bullying, and cyberbullying; designate DASA coordinators; track/report incidents.
Computer Tampering/Unauthorized Use – Reflect prohibitions in AUP/handbooks; ensure referral procedures for violations involving unauthorized access or damage.
Minerva EDU bridges that gap. Use familiar visuals, plain-language reporting, and board-ready insights to help your district manage cyber risk and meet New York’s evolving standards — without overwhelming your team.
RIC One unites New York’s 12 Regional Information Centers (RICs) to deliver statewide technology leadership, data privacy, and security solutions for K-12 schools. By working together, we provide consistent, cost-effective services that help districts safeguard student information, comply with state and federal regulations, and make the most of their data to support teaching and learning.
The New York State Education Department is part of the University of the State of New York (USNY), one of the most complete, interconnected systems of educational services in the United States. Our mission is to raise the knowledge, skill, and opportunity of all the people in New York. Our vision is to provide leadership for a system that yields the best educated people in the world.
Ready to get started? Let's Go!
Send us a quick message and we will contact you within 24 hours to discuss your cybersecurity needs and/or schedule a free 30 min. consultation with a subject matter expert. There is no better time to take control of your cybersecurity program than today.
