01 / Answer-driven
Built from your own answers
The baseline is a structured Discovery — your team's own responses, not weeks of on-site auditing. No agents, no scanning required, light on staff time.
A TRAG assessment is built for K-12: answer-driven, non-intrusive, and scoped to the realities of a lean school IT team. It measures your security posture across every area that matters, scores each on a defensible scale, and turns the result into a plan your board can fund.
The baseline is a structured Discovery — your team's own responses, not weeks of on-site auditing. No agents, no scanning required, light on staff time.
Every result is crosswalked to NIST CSF 2.0 and the K-12 SIX Essentials, and benchmarked against the national K-12 average — so the score has context.
The output is the full report suite — Executive, Technical, Compliance, and a phased Remediation Roadmap — each written for a different reader.
Scores aren't impressions. Each control is rated on a five-level maturity scale with documented reasoning, so the result holds up to an auditor, a board, or an insurer.
Ad hoc or absent. Depends on individuals, not process.
Exists informally; inconsistent and undocumented.
Documented and repeatable across the organization.
Measured, monitored, and consistently enforced.
Continuously improved and adapted to new threats.
A combined assessment spans governance, identity, data, detection, continuity, and third-party risk — the full surface a district has to defend.
Start with the answer-driven baseline, align to a specific framework, or go all the way to a risk process your district owns. All three produce the same report suite.
A complete security baseline built from your team's own answers across every area — the fastest credible starting point.
A framework-aligned assessment mapped to the single standard your stakeholders care about — verified or unverified, your choice.
Everything in an assessment, plus a formal risk assessment process your district owns and can run going forward.
An assessment is the fastest way to replace "I think we're okay" with "here's exactly where we stand, and here's the plan."