St. Croix River Education District

Collaborate • Innovate • Advocate

Reporting Incidents

If you encounter a potential cyber security threat (e.g., phishing, malware, etc.), follow these instructions on how to report a cybersecurity incident.

Training

All SCRED staff complete short training modules (including video(s) and a brief quiz) using Infosec IQ. Staff are "tested" by receiving several phishing simulation emails every month. If you suspect an email to be a phishing attack, report it using the procedure described above.

• Staff who have not fallen victim to the phishing simulation emails only complete training videos every other month.
• Staff who have fallen victim to the phishing simulation emails complete monthly training videos.

This training helps us to prevent cybersecurity incidents and, consequently, this prevention measure helps us to minimize insurance costs.

Keeper Password Management

Password security is a critical component of our cybersecurity, and staff are required to use Keeper for managing passwords. You can log into Keeper on all of your devices using your school Google account. Keeper:

• Auto-generates secure passwords for you
• Saves your passwords and fills them in when you log into websites
• Allows you to securely share passwords with coworkers (one-time or indefinitely)
• Allows SCRED tech staff to have administrative control
• Provides a free Keeper family account for personal use

Resources:

• Keeper Password Manager Procedures
• Training Videos: Session 1 and Session 2

Clear Desks and Clear Screens

Our Clear Desk and Clear Screen Procedure is important to ensure that all sensitive/confidential materials are removed from your workspace and locked away when items are not in use or you leave your laptop or workspace unattended.