Agenda Item
a. Cyderes Managed Security Services (Not to Exceed $678,960)
Summary: Presented by: Dr. Kermit Belcher, Chief Information Officer, Division of Information & Instructional Technology
Request: It is requested that the DeKalb County Board of Education approve the purchase of managed cybersecurity services from Cyderes for an amount not to exceed $678,960.
Why: The purpose of this agenda item is to support the Division of Information and Instructional Technology (DIIT) and district leadership in ongoing efforts to protect the District’s technology systems and safeguard students, staff, and financial information. Please note that this agenda item is intentionally written at a high level to provide transparency while maintaining necessary limitations that protect the District’s security posture. While the District strives to be transparent regarding cybersecurity investments, certain operational details are not disclosed to avoid increasing security risks.
Details: Cyderes provides around-the-clock cybersecurity monitoring and support to help protect the District from cyberattacks, data breaches, ransomware, and other technology-related threats.
The company continuously watches the District’s technology systems for suspicious activity and works to identify potential threats before they can disrupt operations or compromise sensitive information. If a security issue is detected, Cyderes investigates the problem, helps contain the threat, and supports recovery efforts.
Key services include:
Monitoring District technology systems 24 hours a day, 7 days a week
Detecting and investigating suspicious activity and potential security threats
Responding to cybersecurity incidents and helping limit their impact
Providing expert guidance to strengthen the District’s overall cybersecurity program
Monitoring emerging cyber threats and vulnerabilities that could affect District operations
Improving security tools and processes to better protect systems and data
Helping ensure critical technology services remain available and secure for students and staff
These services provide an additional layer of protection for the District’s technology environment and help reduce the risk of service disruptions, data loss, and unauthorized access to sensitive information.
Financial impact: General Fund: 100.2800.530000.00011.7600.9990.0308.070.0000
Contact: Dr. Kermit Belcher, Chief Information Officer, Division of Information & Instructional Technology, 678.676.1274
Effective: Upon Board Approval
Status: Approved by the Office of Legal Affairs
2026 Chronology: Cyderes Managed Security Services
The Department of Information and Instructional Technology (DIIT) seeks approval to continue
managed cybersecurity services provided by Cyderes. This chronology is intended to provide
transparency regarding the District’s cybersecurity investments while maintaining appropriate
safeguards that protect digital privacy, safety, and security.
As the District continues to rely on technology to support teaching, learning, communication,
and daily operations, protecting those systems has become increasingly important. School
districts across the nation continue to face cyber threats such as ransomware attacks, phishing
attempts, and unauthorized access to sensitive information. These incidents can disrupt school
operations, impact instruction, and place student and staff information at risk.
To help address these challenges, the District maintains an ongoing cybersecurity program
focused on protecting technology systems, monitoring for threats, responding to security
incidents, and maintaining reliable access to critical services.
The District’s cybersecurity efforts are guided by the National Institute of Standards and
Technology (NIST) Cybersecurity Framework, a widely recognized model used by public and
private organizations to manage cybersecurity risk. The framework provides a structured
approach to identifying risks, protecting systems and data, detecting potential threats,
responding to incidents, and restoring services when necessary.
Cyderes serves as an important cybersecurity partner by providing around-the-clock monitoring
and support for the District’s technology environment. Their services help identify potential
threats, investigate suspicious activity, respond to security incidents, and strengthen the
District’s overall cybersecurity posture.
Please note that this chronology is intentionally written at a high level. Certain technical and
operational details are not included in order to avoid disclosing information that could adversely
impact the District’s security posture.
Cyderes provides managed cybersecurity services that help protect the District’s technology
systems and sensitive information.
Key Services Include:
● Monitoring District technology systems 24 hours a day, 7 days a week to identify
potential cybersecurity threats.
● Investigating suspicious activity and security alerts to determine whether action is
needed.
● Responding to cybersecurity incidents and helping reduce the impact on District
operations.
● Monitoring emerging cyber threats and vulnerabilities that could affect District technology
systems.
● Providing expert cybersecurity guidance and recommendations to improve security
practices.
● Supporting and maintaining security tools that help protect District systems and data.
● Continuously improving monitoring capabilities as new technology systems and services
are added.
● Helping ensure technology services remain available, reliable, and secure for students
and staff.
These services provide an additional layer of protection for the District by helping identify and
address potential cybersecurity threats before they can cause significant disruption. The
partnership with Cyderes supports the District’s ongoing efforts to safeguard student, staff, and
financial information while maintaining continuity of operations.
Procurement:
According to Board of Education Policy DJE II.B., the term “professional services” means
services that require:
1. A degree in a particular professional field;
2. A license from a state oversight board or similar authority; or
3. The exercise of specialized skill, knowledge, creativity, or technical abilities.
Pursuant to Board Policy DJE Sections II.B and III.C.4, Cyderes meets the definition of
professional services based upon its specialized cybersecurity skills, knowledge, and technical
expertise.
Financial Impact:
Year Cost
2026 $723,960 (included onboarding)
2027 $678,960 amount requested