Ohio’s Bold Plan: Protecting Schools with Cutting-Edge Cybersecurity Efforts

Ohio rolls out cyber training platform for K-12 schools

At a glance

• Initiative Launch: On May 2, 2025, Ohio Gov. Mike DeWine announced a statewide cybersecurity initiative for K-12 schools.
• Key Figures: CyberOhio, the Ohio Department of Education and Workforce (DEW) and the Management Council of the Ohio Education Computer Network are running it.
• Training Platform: The centerpiece is TechGuard, a platform for staff training and simulated cyberattacks.
• Immediate Actions: All Ohio K-12 schools and the state’s 16 Information Technology Centers can use it.
• Future Outlook: Other states may look at Ohio’s shared platform as a model.

A shared answer to school cyberattacks

Schools hold student records and staff data, and most have small IT teams. That makes them easy targets for phishing and ransomware. On May 2, 2025, Ohio Gov. Mike DeWine announced a statewide initiative to help: a single online platform, TechGuard, that trains school staff to recognize attacks and tests them with simulated ones.

Who is running it

CyberOhio, the state’s cybersecurity coordination office, worked with the Department of Education and Workforce and the Management Council of the Ohio Education Computer Network. The Management Council handles the rollout through the Information Technology Centers that already support Ohio districts.

“Protecting our schools and equipping our teachers with training to help them identify and report cyberattacks helps makes our schools safer and stronger,” DeWine said in the state’s announcement.

What the plan covers

The initiative is mostly about people. Its main parts:

Training for every role

Training is at the center. The platform has more than 1,300 learning modules that can be tailored by role, from teachers and administrators to coaches and food service staff. Topics include phishing, email scams, malware and ransomware.

Simulated attacks

TechGuard sends staff simulated phishing emails and other fake attacks, then trains the people who fall for them. Assessments give feedback to both users and administrators. It is a training tool. It does not replace a district’s firewalls or endpoint protection.

Working through the ITCs

The state is delivering the platform through its 16 Information Technology Centers, so districts get it through the same organizations that already run much of their IT.

What happens next

The platform is open to all K-12 schools in Ohio. Administrators can track who has finished the training and where the weak spots are, school by school.

“Through this statewide opportunity, we are providing Ohio’s schools with a critical tool to combat the threat of cyberattacks,” said DEW Director Stephen D. Dackin.

Will other states copy it?

Ohio’s approach is cheap and practical. Instead of asking every district to buy its own awareness program, the state is offering one platform to all of them. If phishing click rates in Ohio schools drop, other states will have a template to copy.

John King, CISSP, PMP, CISM

John King currently works in the greater Los Angeles area as a ISSO (Information Systems Security Officer). John has a passion for learning and developing his cyber security skills through education, hands on work, and studying for IT certifications.