K-12 School District Deploys Armis Across 15 Schools to Protect IoT and OT Assets Against Malware Attacks

Background

Walton County School District serves approximately 14,500 students across 15 schools and operates a highly diverse technology environment. In addition to managed devices such as laptops, phones, and Google Chromebooks for students, the district has multiple unmanaged IoT and OT assets, including BYOD, security cameras, access control systems, thermostats, HVAC controllers, and occasional rogue devices.

Cyber Security Analyst Kyle Kobos is responsible for the district’s cybersecurity stance. He and his network engineer are tasked with responding to security incidents and taking proactive measures, with a focus on blocking ransomware threats.

The Challenge

An expanding attack surface proliferating with IoT and OT assets was the driving factor in the decision to onboard the Armis platform. “We take a defense-in-depth approach to knowing where critical data is,” Kobos explained. “It became clear we needed to extend that same approach to knowing where our critical assets are too.”

Because staff often bring personal devices into schools to support and enhance student learning, Kobos identified potential security vulnerabilities associated with this practice. For instance, an instructor might bring an Alexa device and connect to the network using staff credentials.

Frequently, outside vendors also bring in devices that pose security risks.

Continue Reading