Page 11 - TIM_03-02-23

Soon after the upgraded Portal is deployed, Multi-Factor Authentication (MFA) WITH MFA
must be implemented to enhance our District cybersecurity protections. MFA
is a cybersecurity protocol that will require employees to log into District
systems using two or more of the following:
• Something You Know - Such as your District username, password,
and/or a PIN
• Something You Have - Such as a USB key or a cell phone
• Something You Are - Such as your fingerprint or facial recognition

Why Do We Need MFA?
• Reason #1: In 2023, MFA is required because complex passwords are
no longer enough. Hackers now have different methods at their disposal
to get their hands on user credentials and in most cases, a password
alone will not stop them.
• Reason #2: According to the FBI, schools and school districts are top
KEEPING YOU SAFE
targets for cybercriminals, resulting in ransomware attacks, data theft, and
the disruption of learning.
• Reason #3: Cyber liability insurers now require multi-factor
authentication. The District is not insurable unless MFA is implemented.

What Will MFA Look Like?

In implementing MFA, several options are available including hardware keys,
authentication apps, push notifications, and biometrics. There are pros and
cons to each of these options which are being carefully considered by the
MFA project team.

Who will be Affected and When?

Affected users will include all staff who log into our network including all
District and charter school employees, part-time employees, substitute
teachers, contractors, coaches, and interns. Students will not be included
at this time. MFA will be deployed in stages with one or more of the above-
mentioned groups moving to MFA on an approved timetable.

As soon as the MFA implementation plan is complete and approved, details
will be communicated to all employees including the MFA methods to be used,
user instructions and how-to videos, and the planned deployment timetable.
Page 11