2026 Chronology Dean Dorton

2026 Chronology Dean Dorton Cybersecurity Advisory Services

The Division of Information and Instructional Technology (DIIT) seeks approval to continue
cybersecurity advisory services with Dean Dorton to support the district’s ongoing efforts to
strengthen cybersecurity governance, risk management, compliance, and incident
preparedness. These services provide strategic leadership and expert guidance to help protect
DeKalb County School District’s digital infrastructure, sensitive data, and technology resources.

As the district continues to expand its reliance on technology to support teaching, learning, and
business operations, cybersecurity threats have become increasingly sophisticated and
persistent. School districts across the nation continue to experience ransomware attacks,
phishing campaigns, account compromise attempts, and data breaches that can disrupt
operations and place sensitive information at risk. To address these challenges, DCSD requires
ongoing cybersecurity leadership and strategic oversight to ensure risks are identified,
assessed, and mitigated in a proactive manner.

Dean Dorton will provide Virtual Chief Information Security Officer (vCISO) services and
cybersecurity consulting support aligned with the National Institute of Standards and Technology
(NIST) Cybersecurity Framework. This framework is built around five core functions: Identify,
Protect, Detect, Respond, and Recover. By aligning cybersecurity initiatives with the NIST
framework, the district can continue to mature its security program through a structured and
risk-based approach.

Dean Dorton will assign a senior cybersecurity consultant, supported by a team of cybersecurity
professionals, to assist district leadership in advancing cybersecurity initiatives and
strengthening the district’s overall security posture. Services will be aligned with district priorities
and the DCSD cybersecurity roadmap.

Dean Dorton Cybersecurity Advisory & Monitoring Services (Cost- $250,200)

Dean Dorton will assign a senior cybersecurity consultant, supported by a team of cybersecurity
professionals, to assist district leadership in advancing cybersecurity initiatives and
strengthening the district’s overall security posture.

Key Services Include:

    ●​ Cybersecurity strategy, governance, and compliance consulting
    ●​ Executive-level cybersecurity reporting and risk management guidance
    ●​ Incident response planning, coordination, and oversight
    ●​ Internal and external audit support
    ●​ Security awareness program oversight and strategic direction
    ●​ Annual security risk assessments to evaluate cybersecurity controls and identify
       opportunities for improvement
    ●​ Attack Surface Monitoring (ASM) to identify exposed systems, vulnerabilities, and
       emerging threats
    ●​ Continuous monitoring of publicly exposed digital assets, software components, and
       known vulnerabilities
    ●​ Recommendations and mitigation strategies to reduce cybersecurity risk and improve
       overall security maturity
Dean Dorton Cybersecurity Assessment Services (Cost- $81,000)

Dean Dorton will perform comprehensive cybersecurity testing and assessment activities
designed to validate security controls, identify vulnerabilities, and evaluate the district’s ability to
detect and respond to cyber threats.

Key Services Include:

    ●​   External Security Assessment
    ●​   Internal Security Assessment
    ●​   Google Workspace Security Review
    ●​   Attack Simulation Exercise
    ●​   Web API Discovery and Risk Assessment

Dean Dorton provides specialized expertise that supplements district staff resources and
supports the ongoing development of a mature cybersecurity program. These services help
ensure that DCSD remains proactive in identifying risks, strengthening security controls, and
protecting critical systems and information.

Procurement:

According to Board of Education Policy DJE II.B., the term “professional services”
means services that require:

    1.​ A degree in a particular professional field;
    2.​ A license from a state oversight board or similar authority; or
    3.​ The exercise of specialized skill, knowledge, creativity, or technical abilities.

Pursuant to Board Policy DJE Sections II.B and III.C.4, Dean Dorton’s cybersecurity
advisory and assessment services qualify as professional services due to the
specialized technical expertise and professional judgment required to perform the work.

Financial Impact:

 Year                                                Cost

 2025-26                                             $250,200

 2026-27                                             $331,200 amount requested

*The increase from 2026 to 2027 reflects the addition of comprehensive cybersecurity
assessment and testing services, including external and internal security assessments, attack
simulation exercises, cloud security reviews, and API risk assessments. The district is
maintaining all existing vCISO and cybersecurity advisory services while adding proactive
testing designed to identify and address vulnerabilities before they impact operations.