FAQ
Frequently asked questions.
Straight answers about K12 Cyber Forward, the Cybersecurity Rubric 2.0, review pathways, data handling and the optional pool track.
About the program
What is K12 Cyber Forward?
K12 Cyber Forward is a cybersecurity improvement program for Georgia public school districts, run by GLET, Georgia's CoSN chapter. Districts assess where they are with the Cybersecurity Rubric 2.0, turn the results into owned improvement work, keep supporting evidence and choose the level of review that fits.
Who runs the program?
GLET, Georgia Leaders of Educational Technology, runs the program and the private portals. GLET is Georgia's chapter of CoSN, the Consortium for School Networking. CyberCon GA is a community partner. More about GLET and our partners.
What is the Cybersecurity Rubric 2.0?
A K-12 cybersecurity maturity rubric organized around the six NIST Cybersecurity Framework 2.0 functions (Govern, Identify, Protect, Detect, Respond and Recover) and 22 categories, each described across five maturity levels. Read our plain-language explainer.
Which districts can take part?
Georgia public school districts and school systems. An authorized district contact, usually the technology director or another leader who can coordinate with the superintendent's cabinet, submits the participation request.
Is there a cost to participate?
GLET shares current participation terms, including any fees or sponsored options, with the district contact during the request review. Ask the program team if you need this information for budgeting.
Assessment and review
How long does a baseline assessment take?
It depends on the scope and who takes part. Plan for a series of short working sessions over several weeks rather than one long meeting. A clear scope and the right people in the room matter more than speed.
Who should be on the assessment team?
Include the technology lead plus people who own the processes being rated: someone from the superintendent's cabinet, finance or business operations, human resources, student information and, where possible, a school-level leader. Each person brings knowledge the rubric asks about.
Does a low score mean we failed?
No. A baseline shows where to start. The program is supportive, not punitive: low ratings point to help and practical next steps, and individual district results are never ranked publicly.
How do the three review pathways differ?
Level 1 is self-assessed by the district team. Level 2 adds a named facilitator who helps the team examine the baseline. Level 3 is independently reviewed by a named third-party verifier who issues a time-bounded review record for a stated scope. Compare the pathways.
Does an independent review certify our district?
No. A Level 3 review records what a verifier examined, for a stated scope and period. It is not a certification that any control works, and it does not predict or prevent incidents.
Data and privacy
What information goes into the portal?
Professional work information: rubric ratings and rationale, improvement plans, policies, vendor and training records and redacted supporting evidence. Districts should keep student records, staff personal details and passwords out of the portal.
Who can see our district's results?
Each person has a named account and sees only what their role needs. District staff see their own district. GLET staff see what their program role requires to coordinate support. Comparisons between districts are switched off until participating districts agree to rules for sharing. Read the privacy notice.
Where is the data hosted?
On a dedicated server in Atlanta, Georgia. Connections are encrypted and uploaded files are encrypted at rest with keys stored separately from the data.
The optional pool track
What is the optional pool track?
A separately governed, member-funded self-insurance pool that participating districts can ask about. It has its own membership, contribution, claims and coverage records, which remain separate from the improvement program.
Does our rubric score change our coverage or price?
No. Program participation, rubric results and review records do not bind insurance, guarantee a payment, set a price or change governing documents. Policy terms and authorized decisions control.
How do we ask about the pool?
Choose "Information about pool participation" in your participation request, or contact the program team. A GLET program contact will follow up with the relevant program information.
Joining
Who should request district participation?
A district technology leader or another authorized contact who can coordinate participation with district leadership.
What should we have ready?
Start with your professional contact information. Once access is prepared, your team can agree on assessment scope and gather redacted supporting evidence in the private portal.
What happens after we submit a request?
GLET reviews the district and the contact before preparing any account access. You receive a private receipt link to check the status of your request. Nothing is provisioned automatically.
Is the learning content formal rubric certification training?
No. The portal provides original practical guidance and knowledge checks. Formal rubric training and licensing follow the publisher's own programs and terms.

Community-driven. Georgia districts learn from and lift each other.
Still have a question?
Ask the program team.
We read every message and reply from the GLET program team.