Blog
Field notes.
Short essays from the seat we usually occupy — next to district IT at 10pm on a school night.
April 22, 2026 · 6 min read
The first hour of a school-day ransomware hit
What to actually do between the first ransom note and the first family notice — without freezing, without overpromising.
ransomwareincident responseK-12March 18, 2026 · 5 min read
The payroll-redirect phish that keeps hitting K-12
A teacher's direct deposit gets rerouted. By the time payroll catches it, two pay cycles have moved. Here is the recurring pattern and the two controls that stop it.
phishingpayrollbusiness email compromiseFebruary 9, 2026 · 7 min read
A 45-minute tabletop exercise for school trustees
Trustees don't need to know which firewall you bought. They need to know what they'll be asked, by whom, at 11pm on a Sunday. Here is a tabletop that gets them there.
governancetrusteestabletop