Skip to main content
HackFirstAidEducation
All vendors

Student Information System

Aspen SIS (Follett)

Common in MA, NJ, ON. State-level deployments in several jurisdictions.

Escalation path

  1. Open a Severity 1 case in the Aspen support portal.
  2. Contact your state Aspen liaison if your district runs on a hosted state instance.
  3. Notify the Follett security team via your account manager.

Contract clauses to pull up

  • State-hosted instances (e.g., MA DESE) have shared incident-response responsibilities — confirm who notifies whom.

Pair with these playbooks

Student Information System compromise

PowerSchool, Aspen, Infinite Campus, Skyward, or Synergy account takeover, grade tampering, or credential-stuffing.

Vendor / EdTech supply-chain compromise

PowerSchool's 2024-2025 incidents are the archetype. Generalizes to any SIS / LMS / payment / transportation vendor.