Education security for open campuses and small teams
Schools, colleges and universities hold student records, financial aid data and sensitive research on open, fast-changing networks. CMDash gives lean IT teams a clear program, tracked actions and evidence to show a board, an auditor or a sponsor.
Regulatory and customer pressure
FERPA
The Family Educational Rights and Privacy Act governs who may see student education records.
Student aid data security
Institutions that take part in federal student aid programs have information-security obligations under the Gramm-Leach-Bliley Act.
Federally sponsored research
Research with controlled unclassified information or defense sponsors brings NIST SP 800-171 and CMMC expectations.
International students and partners
Recruiting or partnering in the EU can bring GDPR.
Threats that target this industry
Ransomware
Attacks on districts and universities close classrooms and lock records.
Phishing at scale
Large, changing populations of students and staff give attackers constant new targets.
Decentralized IT
Departments and labs run their own systems, which widens the surface a central team has to cover.
The frameworks CMDash tracks for you
Crosswalked, so one piece of evidence counts twice:
- ISO/IEC 27001:2022 and NIST Cybersecurity Framework 2.0
Capabilities that matter most here
Live posture grade
A live grade and trend for the president, the board or the superintendent.
An A-F score recomputed every 4 hours once a tool is connected, with 30-day and 90-day trends.
POA&M tracking
Findings become tracked actions with owners and dates across departments.
Owner, committed date, milestones, closure evidence and the full history of every change. Tracking is on every plan.
Evidence from your tools
Evidence from the tools your IT team runs, without a pre-audit scramble.
Integration data collected on a schedule and turned into evidence by mapping rules you install or write, plus manual uploads with history.
CMMC and SPRS self-assessment
Practice-level tracking and an SPRS score for research that needs it.
Practice-level evidence, an SPRS score and the official CMMC / NIST 800-171 self-assessment package with affirmation and POA&M.
Risk register and FAIR
A risk register to rank spending across competing priorities.
Likelihood, impact, owner and remediation per risk, with an annualized loss figure in dollars (Starter and up).
Board-pack reports
A board pack in plain terms.
A PDF with posture, top open risks and loss exposure from the report builder (Essentials and up).
Sources
Ready to see your posture?
Start a 30-day free trial of any paid plan — a card is required, and it converts unless you cancel — or sign up for Free with no card at all.