DPO Download

Hosted by RICone DPSS

TechnologyInterviews guests

Website RSS feed LinkedIn X / Twitter

Episodes

Latest episode

Oct 2026

Language

About the show

No one goes at it alone, k12 organizations need to work collectively to address growing cybersecurity challenges. The DPO Download provides NYS School District Data Protection Officers with insightful interviews, threat landscape updates, and peer spotlights so they don’t have to go at it alone.

Listen to episodes

43 recent

October 7, 2026Episode 4234 min

Episode 42 - AI Literacy and Data Protection: A Blueprint for K–12 Leaders

In this episode our hosts welcome Melissa Boucher, Manager of the E-Learning Team at NERIC (Capital Region BOCES). The conversation explores the rapidly evolving role of artificial intelligence in K–12 education, moving beyond basic administrative uses to innovative classroom applications like AI-driven interactive learning. Boucher addresses critical data privacy and security considerations, highlighting the risks of sensitive data exposure—such as students sharing personal information with AI companion bots like Character.AI. Emphasizing that school Data Protection Officers (DPOs) cannot navigate these challenges in isolation, she advocates for district-wide AI literacy, joint administrative committees, role-specific professional development, and collaborative approaches that foster safe, human-centered technology integration for teachers, students, and parents.

September 2, 2026Episode 4137 min

Episode 41 - Navigating Cyber Insurance for School Districts: Key Risks, Essential Controls, and Policy Pitfalls

In this episode of The DPO Download , our hosts welcome risk advisors Nick Spencer and Scott Garcia from Smith Brothers Insurance to discuss the evolving landscape of cyber security insurance in K-12 school districts. The panel explores how cyber threats have shifted from simple data theft to sophisticated extortion schemes. The guests detail the critical shift from standard policy add-ons to dedicated, standalone cyber coverage, highlighting the core security controls underwriters require today—such as multi-factor authentication (MFA), data encryption, patch management, EDR, and air-gapped backups. Additionally, they examine common policy limitations like sub-limits and exclusions, offer practical advice on policy reviews and third-party vendor management, and share real-world anecdotes that underscore the importance of proactive risk management in education.

August 5, 2026Episode 4029 min

Episode 40 - Unpacking NIST 2.0 with the RIC One DPSS Team

In this episode of The DPO Download, our hosts are joined by RIC One DPSS team members Ashleen Speen and Keith Schubert to unpack a major shift in New York State Ed Law 2-D compliance: the transition from the NIST Cybersecurity Framework 1.1 to version 2.0. Together, the panel explores how NIST 2.0 brings governance to the forefront of district leadership and how the team developed new, tiered community profiles (Critical, Core, and Comprehensive). Our guests highlight the collaborative effort behind RIC One’s newly released gap assessment and reporting tool, while sharing practical strategies for prioritizing risk, tracking evidence, and building long-term cybersecurity maturity—reminding listeners that when it comes to data privacy, no district has to go it alone.

June 24, 2026Episode 3930 min

Episode 39 - Vibe Coding and NYS Cybersecurity Conference

Our hosts share key takeaways for school districts from the 2026 New York State Cybersecurity Conference. Listen in as they dive into new developments in AI prompting, data privacy, and the growing trend of educators "vibe coding" applications for their classrooms. Finally, learn about the critical privacy concerns all School District Data Protection Officers should consider when addressing staff members and AI-generated code.

June 3, 202621 min

Episode 38 - Cybersecurity Annex and AI Threats

On this episode our hosts revisit a interview with Hilary Hofstein, Managing Program Coordinator for Health, Safety, and Risk at Capital Region BOCES on the Cybersecurity Annex a component of school districts' Building Level Emergency Response Plans in New York. Hofstein provides a deep dive into the annex, describing it as a vital "cheat sheet" or quick guide that outlines essential protocols and key personnel for digital crises. Our hosts also address the newest developments in AI-driven phishing techniques—such as "device control flow" attacks—currently targeting New York schools.

April 15, 2026Episode 3722 min

Episode 37 - 2026 RIC one DPSS Conference

Join our hosts live at the 2026 RIC one Data Privacy and Security Conference. Listen as we hit the conference floor to catch up with district leaders and IT experts, diving deep into the breakthrough insights and "aha" moments they’re taking back to their schools.

March 18, 2026Episode 3629 min

Episode 36 - Navigating AI Guidelines and Launching a Cybersecurity Academy

In this episode of the DPO Download our hosts speak with Eric Coronado, Director of Technology for the Suffern Central School District, to explore how his district is embracing cutting-edge technological initiatives. Eric shares how his team proactively addressed the rapid rise of artificial intelligence by collaborating with teachers to create a "green, yellow, and red light" framework for AI tools, ensuring a delicate balance between classroom innovation and strict student data privacy. Additionally, he details the launch of a pioneering three-year cybersecurity academy at Suffern High School.

February 11, 202636 min

Episode 35 - Beyond the Silos: How HR and IT Collaboration Revolutionized District Security

In this episode, our hosts sit down with leadership from the Burnt Hills-Ballston Lake Central School District—Superintendent Patrick McGrath, Director of Technology Doug Carlton, and Assistant Director of Technology Michael Steinberg. They discuss the district’s strategic shift toward a unified vernacular across departments, a move that enabled the implementation of automated user provisioning reaching all the way to the physical security layer. Listen as we explore how the district successfully leveraged administrative regulations and a culture of shared decision-making to streamline onboarding processes. By reducing IT overhead and enhancing data privacy in alignment with NIST 2.0 standards, this team provides a roadmap for modernizing school district operations.

November 5, 2025Episode 3427 min

Episode 34 - Cybersecurity as a Team Sport: Governance, Response, and Strategic Planning for K12 Schools

On this episode we welcome former Chief Information Officer at Pittsford Central School District Dr. Jeff Cimmerer to the podcast. Listen as Dr. Cimmerer speaks about how cybersecurity is very much a team sport. Learn how using common nomenclature can help reach a variety of stakeholders within your district.

September 10, 2025Episode 3331 min

Episode 33 - School Year Readiness, and Collaboration

This episode we are joined by Data Protection Officers Brian Zimmer of Webster CSD, John Miller of Honeoye Falls-Lima CSD, along with Dan Fullerton of Monroe Regional Information Center (RIC) to speak about the opening of a new school year. Listen as we discuss how collaboration plays a critical role among the Monroe RIC region by emphasizing standardized practices, shared hardware, and mutual support so no one goes at it alone.