# CIS Identifies K-12 Cybersecurity Gaps

A Center for Internet Security report cited in a November 10, 2026 article found that 51% of surveyed K-12 organizations experienced a cyber incident in the prior year, while only 15% regularly practiced their incident-response plans. The findings point to a preparedness gap for school organizations and potential demand for cybersecurity support, though the article identifies no specific solicitation, contract value, or procurement contact.

- School districts and education-sector contractors may find opportunities in incident-response planning, tabletop exercises, third-party risk reviews, breach-notification readiness, and continuity planning.
- Contractors can use the reported incident-response practice gap to shape relevant service offerings; the article does not establish a funded requirement or a procurement timeline.

**Jurisdictions:** sled
**Industries:** Education
**Topics:** Cybersecurity
**Published:** November 11, 2026

### Key Quotes
> The easiest thing I would say is, look at past incidents for inspiration.
> — Rob Lelewski, Senior Vice President of Cyber at Marsh

### Sources
- [School Cybersecurity Plans Have Critical, Fixable Gaps](https://www.govtech.com/education/k-12/school-cybersecurity-plans-have-critical-fixable-gaps) - GovTech