The ClassLink Cybersecurity Rubric for Education is a tool created by a coalition of experts using the National Institute of Standards and technology (NIST) Framework, as well as other cybersecurity and privacy standards. Making sure to take into account the unique needs of education, the rubric provides school districts with the tools to self-assess their cybersecurity program.
The Cybersecurity Rubric for Education is free, but educators can go a step further and take the certification course to earn a Certified Cybersecurity Rubric Evaluator (CCRE) credential.
Cybersecurity Rubric: Introduction
Getting started with the Cybersecurity Rubric (CR) was very easy for me. Since I am already a ClassLink user, I accessed the training by logging into my ClassLink account and clicking on the “ClassLink Academy” app. If you are not a ClassLink customer, go to Cybersecurity rubric home page to read about the initiative and download the rubric. To further improve your skills, create a CR Academy account to access free training to better use CR, or purchase the Certified Cybersecurity Rubric Evaluator (CCRE) training and exam.
Once I set up my account, I started with the first course, “Learn How to Use the Cybersecurity Rubric.” This self-paced training lasts approximately 2½ hours, with topics on cybersecurity awareness and assessments, rubric maturity levels, and how to conduct a self-assessment for your school system. I completed the units and was then able to take the survey to earn a certificate showing that I understood CR and could use it to conduct self-assessments. This certificate can be shared on your social networks, such as LinkedIn.
I also took their more comprehensive course (approximately 3½ hours) to become a Certified Cybersecurity Rubric Evaluator (CCRE). This certification is more complete and also has an exam at the end. Allows CCREs to provide third-party evaluations to school systems for a fee.
Cybersecurity Rubric: Best Features
ClassLink has created the Cybersecurity for Education Coalition, a group of experts to develop the rubric and certification courses. They took the NIST framework and refined it to a more workable and understandable form so that school districts can better evaluate their cybersecurity postures. I found the rubric easy to understand, but I recommend taking the free training on how to use it for best results.
I like the learning management system they have for the training modules, which is well designed and easy to navigate. Since the training is self-paced, I could easily pick up where I left off. ClassLlink also offers training for all of their products, as I am a user myself, I found this additional free training to be a huge plus.
The CCR and CCRE training was very comprehensive. ClassLink uses a variety of techniques to deliver training, including videos and interactive assessments. I was able to easily go back and review the content using the menus to the left of each module.
Cybersecurity rubric: prices
The Cybersecurity Rubric for Education and training on how to use it for self-assessment are free and can be found at your Cybersecurity rubric website.
I also completed training to obtain certification as a Certified Cybersecurity Rubric Evaluator (CCRE). This training and access to the assessment costs $99. Once I take and pass the assessment, I will be credentialed to provide paid services using the rubric as a CCRE. This training gives me the knowledge and tools to evaluate other districts' cybersecurity programs and provide them with a report and next steps to help them improve. This certification comes with a credential and is valid for three years.
Cybersecurity Rubric: Key Takeaways
Over time, I have looked at many tools to evaluate and improve cybersecurity. Some of the solutions were very comprehensive, but not completely relevant to my particular situation in a school district. Others were so complicated and technical that I found completing them cumbersome and confusing.
ClassLink has taken one of the best, the NIST framework, and created a tool and training that meets the specific needs of a school district technology leader. I commend you for seeing the need and providing a well thought out and easy to implement solution.
