Skip to main content

Cyber Academy course

MFA rollout playbook for schools

A 19-minute Cyber Academy course for technology team. Roll out multifactor authentication in a sensible order, with the right method for each group, a campus-by-campus communication plan and help-desk scripts that stop attackers from talking their way past it. 6 sections, 8-question knowledge check, a branching practice scenario and a completion certificate. The companion guide gives managers the outline, a huddle plan and the answer key.

Time to use
19-minute course
Audience
Technology teams
Language
English
Formats
PDF
First page preview of MFA rollout playbook for schools

What's inside

  • Section: Why the order of the rollout matters
  • Section: Choosing methods for each group
  • Section: Communication plan and week-by-week timeline
  • Section: Help-desk scripts for lost phones and recovery
  • Section: The exceptions register
  • Section: Measuring coverage and catching fatigue attacks
  • 8-question knowledge check with explanations
  • Branching scenario: The principal who needs MFA reset right now
  • Completion certificate (named accounts)
  • Printable companion guide with facilitator notes and answer key

Learners will be able to

  • Sequence an MFA rollout from admins through finance, leadership, staff and older students
  • Choose MFA methods by risk, including phishing-resistant options and plans for staff without smartphones and shared devices
  • Run a week-by-week communication and support plan with campus champions
  • Use a help-desk script that verifies identity before any MFA reset
  • Track coverage, exceptions and push fatigue attempts with measurable reports

More pages

How to use and print

The course runs in Cyber Academy; this companion guide prints double-sided on Letter for managers and facilitators.

Participating districts download the same files co-branded with their own name and logo, and the QR codes count scans for their campaign reports.

Supports these rubric areas

  • Identity Management, Authentication, and Access Control
  • Awareness & Training
  • Policy
  • NIST CSF PR.AA
  • NIST CSF PR.AT
  • NIST CSF GV.PO

Part of

Cyber Academy course · Technology teams

Admin account hygiene

Shrink the number of accounts that can take down the district: separate daily and admin accounts, keep break-glass, service and vendor accounts under control, and run a quarterly privileged access review you can show as evidence.

  • 18-minute course
  • English
  • Online course (sign in)

Flash-n-Flush one-pager · All staff

Think before you scan

September staff edition for all school staff. QR codes are everywhere in September: game-day parking, spirit-wear orders, staff lunch sign-ups.

  • 90-second read
  • English
  • PDF

Flash-n-Flush one-pager · Students

Free and urgent? That's bait.

December student edition for students in grades 6-12. Fake giveaways, 'free' phone credits and copycat apps are built to grab one thing: your login, your personal info, or a payment from a family card.

  • 90-second read
  • Grades 6-12
  • English · Español
  • PDF

Cyber Academy course · Technology teams

Backups you can actually restore

Design district backups that survive ransomware, prove them with a regular restore test, and keep a one-page record that shows leaders, auditors and insurers exactly how fast you can bring the school day back.

  • 18-minute course
  • English
  • Online course (sign in)

Sources