Skip to main content
Annual Tabletop
Menu
Ransomwareintermediate~60 min

K-12 District — Student Information System Ransomware

A ransomware event encrypts the SIS one week before report cards. Run the response under FERPA, state DOE notification rules, and parent communication constraints.

Learning objectives

  • Decide on parent notification timing and channel under FERPA.
  • Execute SIS contingency without losing instructional days.
  • Coordinate with state DOE and CISA per K-12 sector guidance.

Scenario brief

## Scenario context

Anchor scenario for K-12 district CIOs. Aligns to the K-12 sector annex of the
CISA Tabletop Exercise Packages.

Bring this scenario to your next exercise.