Tennessee's K-12 Tailored Cyber Risk Solution

Simplified Compliance, Amplified Security!

Tennessee school districts rely on technology just like any business—but with fewer resources and higher stakes. Between limited staff, growing cybersecurity threats, and strict rules like FERPA, CIPA, COPPA, CJIS and Tennessee’s own requirements (e.g. T.C.A. 49-1-701, T.C.A. 49-6-804, etc.), the pressure is nonstop.

That’s why we built a smarter, simpler way to help Tennessee districts stay secure and compliant—without the stress or the high price tag. Peace of mind is now practical. Get the tools, guidance, and protection your schools need, all in one easy-to-use platform.

Only 2% of School Districts We Engage With Are Compliant With Federal and State Cyber Requirements

Tennessee's students and staff deserve uncompromised and sustainable cybersecurity

Laws & Regulations

OMB UGG Final Revision 200.303(a)-(e)

If administering federal awards, establish/document/maintain effective internal controls and take reasonable cybersecurity and other measures to safeguard information

FERPA (34 CFR Part 99)
Confidentiality of education records; annual notices; access controls; disclosure logs; staff training
PPRA (20 U.S.C. §1232h)
Notice/consent for certain surveys, marketing, or sensitive data collection
IDEA Part B (34 CFR §§300.610–.627)
Notice/consent for certain surveys, marketing, or sensitive data collection
CIPA (47 U.S.C. §254)
Internet safety policy; content filtering & monitoring; online safety/cyberbullying education
HIPAA/FERPA guidance
Treat school health records under FERPA; define exceptions
FBI CJIS Security Policy
Technical, physical, and personnel controls; audits; training for districts with police presence
T.C.A. 49-1-221 Internet Acceptable Use Policy – Adopt/enforce AUP with filtering, instruction, consequences; Director implements.
T.C.A. 49-1-701 et seq. Student Data Privacy Act – Maintain local student-data privacy policy consistent with act.
T.C.A. 49-1-706 Biometric consent – Obtain written parental consent before collecting biometric/physiological data.
T.C.A. 49-1-708 Student Online Personal Protection Act – Operators barred from ads/sale/profiling; require security; delete on request.
T.C.A. 49-6-804 Safety plans – Adopt district + building-level plans; submit annually by July 1.
T.C.A. 49-6-4302 Annual security assessments – Each school completes annual assessment using DHS tool with admin + law enforcement.
T.C.A. 49-6-2701 Threat assessment teams – Establish LEA policy; form teams with law enforcement; train; conduct assessments; report activities.
T.C.A. 10-7-512 Email monitoring policy – Adopt written policy on monitoring; inform employees email may be public record.
T.C.A. 10-7-504; 10-7-516 Public records exemptions – Classify student/security records confidential; apply exemptions in PRR responses.
T.C.A. 47-18-2107 Data-breach notification – Notify TN residents of breach within 45 days; notify data owners if maintained for others.
NOTE: Let’s make this a great resource for everyone.  If we are missing any legislation, please send us a quick note to [email protected]
Tennessee K-12 Compliance Matrix (Download)
Flag_of_Tennessee

Build a safer, stronger future for your Tennessee schools with Minerva EDU.
With rising cybersecurity threats and new state mandates like T.C.A. 49-6-4302, K–12 IT teams need more than technical tools—they need clear communication with leadership.


Minerva EDU bridges that gap.
Use familiar visuals, plain-language reporting, and board-ready insights to help your district manage cyber risk and meet Tennessee’s evolving standards — without overwhelming your team.

We Protect Tennessee Schools!
This Is How We Do It!
TETA Logo

TETA’s core mission is to promote excellence in educational technology by facilitating the sharing of ideas, resources, and best practices; advocating for professional standards; and translating research into actionable insights for teaching and learning

Visit our The Corner (Insights & Answers) our blog and FAQ for helpful tips, expert guidance, and answers to common questions. Curious about the value we deliver? Try our ROI Calculator at the bottom of our EDU page to see how much your district could save while improving cybersecurity.
Ready to get started? Let's Go!

Send us a quick message and we will contact you within 24 hours to discuss your cybersecurity needs and/or schedule a free 30 min. consultation with a subject matter expert.  There is no better time to take control of your cybersecurity program than today. 

Kids Pointing

Does your organization rely on federal funds?

Most Don't Know They have attached cyber requirements

Minerva Was Designed For This Purpose

Read The Full Post