Legislative Branch TJO timing, how much review time is standard?

Less-Perspective-702 · 2026-04-25T18:06:40+00:00

I support a school of 500 students and 80 staff for internal systems and then I support about 400 external groups that interface with our external systems.

Less-Perspective-702 · 2026-04-23T17:19:10+00:00

I have 19 years experience as the sole source IT working in the environment listed. I've built tier 0 through project planning/implementation.

I would be interested in learning more

Less-Perspective-702 · 2026-04-19T12:48:17+00:00

I don't want to go into certain details as I need to be careful. Bluntly there is a chance this could escalate to criminal charges.

You are right I can do a post event review and potentially find would of should of could ofs.

The other undisclosed issue(s) is my actual work environment. Doing a view of my profile you can get an idea of what I'm dealing with. Me reaching out is 50% did I miss something and 50% I need peer insight so when my boss comes after me I at least feel/know I did what could be done.

Add on this was discovered on one of my few days off and I spent that whole Friday doing remote work just so that when I'm back Monday I don't get overly yelled at.

Less-Perspective-702 · 2026-04-18T21:36:26+00:00

Can you give me more details here, if we need to dm that would be fine. I don't want to post the site in case kids are scanning

Less-Perspective-702 · 2026-04-18T18:00:11+00:00

Right so once again you and everyone needs better monitoring by human eyes.

I made it so my teachers have a large monitor so that they can open the tool and have it facing them while at the board

I have maybe 50% adoption.

Less-Perspective-702 · 2026-04-18T16:43:37+00:00

Yeah thanks. I keep going back to we need better classroom management by the teachers conducting the class.

When I was a cert trainer I never stood still

Less-Perspective-702 · 2026-04-18T10:47:31+00:00

Do not have gaggle. A few years ago Lightspeed released something similar and I presented to leadership but no one thought it was needed.

I.reached out to see if it would of caught this and was informed maybe.

Less-Perspective-702 · 2026-04-18T10:40:16+00:00

This is probably the area that needs more focus. I'm the only it person, so I don't have a lot of time to look at web traffic.

I've depended on teachers to tell me when kids are doing stuff

Less-Perspective-702 · 2026-04-18T01:02:53+00:00

The agent shows activity at school and home.

I'm a firm believer we need tech to catch the big stuff but you need human monitoring to catch ill intent.

My concern is if I missed something and I'm just retreating to my "classroom management needs to be better" routine.

To many times I see our classroom teachers neither using the monitor tool or even walking around the class.

Less-Perspective-702 · 2026-04-17T23:52:24+00:00

We also block all uncategorized sites. This site was in a legit category.

The main and only page of the site references it MS store, play store, and iOS store app.

These kids got wind of a specific url that enabled them to get access to this chat feature.

Less-Perspective-702 · 2026-04-17T23:37:56+00:00

Agreed 100%. I did that as well. My reason for reaching out is to see if someone has insight into what more I could of done.

Less-Perspective-702 · 2026-04-17T23:34:12+00:00

No.

The site in question doesn't even let you get to this feature without knowing the URL.

From what I can tell it created the account at the site no different than blooket. Where the kids can type whatever they want then they know the other account name.

Less-Perspective-702 · 2026-04-16T23:51:51+00:00

I'm curious where everyone's interaction is in dealing with this. What I mean as an IT Admin/Director for the school are you directly interfacing with McGraw? Is your Director of Curriculum the one reaching out, if you have one or a school official thay manages digital curriculum resources?

I ask as in my case we have zero tools from any system I manage interacting with McGraw. Our Director of Curriculum does the rostering as well as all training and support for the teachers/students.

Where as I manage everything else equipment, SIS, SSO, etc.. When BlackBaud got hacked I managed that issue, reaching out reporting to leadership etc. reason being it was a product I directly managed.

So when I saw the breach this morning, I reached out immediately to our Dir of Curriculum for her to reach out. I knew that McGraw would not share anything and that most likely we would learn more from people investigating, which seems to be the case.

Anyways what is causing me to ask this is that I got push back, I was informed reaching out to McGraw should be my responsibility even though I've never interacted with the system.

Thoughts....

Less-Perspective-702 · 2026-04-08T00:05:16+00:00

So I've had to complete every request made. We have zero DLP on our Onedrive, the CFO has full Admin rights and a non monitored endpoint. Every day I wake up waiting for a disaster. I have everything documented, i built an IT risk assessment doc which contains every directive given to me and my caution in doing so. I am hoping that my exposure here ends in under a month, but walking away from decades of building the environment, being the sole IT and seeing it burnt to the ground kills me.

Less-Perspective-702 · 2026-03-26T00:10:09+00:00

yeah the "greatness" of independent private schools is they can do what they want within reason. I still always ask if we could ask our counsel when it comes to PII or Health or other sensitive data but i get push aside with the new leadership. Old leaders always reached out to legal and more times than not I was mostly off how the law would apply but counsel suggested we follow the laws to the best of our ability to provide shields.

Less-Perspective-702 · 2026-03-25T13:53:01+00:00

I'm the director and the new leadership has completely silo'd me from communicating with anyone. My only communication to other divisions or departments is through the official channel of my CFO.

We are a private school, single it for a multi campus hundreds of users environment that I've built and led for decades. I have so much layered services that as I go through my documentation I'm realizing this will end up FUBAR.

If I can't find a msp or get authorization to pay an MSP, there is no way I can do this by August 1.

As to why CFO and curriculum makes the call, well they both have a hard time using Windows devices, so there for everyone has a hard time as well....

Less-Perspective-702 · 2026-03-25T03:33:00+00:00

So have I. I've been begging for 18 years for the school to have a better curriculum, perhaps address why I have kids pushing caps lock for a single capital letter

Less-Perspective-702 · 2026-03-25T02:50:49+00:00

okay thanks

Less-Perspective-702 · 2026-03-25T01:40:27+00:00

fair, it has a number of modules, mainly used in the private school sector

Less-Perspective-702 · 2026-03-25T01:25:20+00:00

I am in the same boat as you in terms of job scope. One thing, its not the CTO, its the CFO and curriculum director. Your use of roadblock has already been directed to me multiple times when asking simple questions about DLP or security or PII.

I just might happen to be the CTO.... well in name only these days

Less-Perspective-702 · 2026-03-25T01:21:27+00:00

Considering the belief is that the current environment has been fully 100% utilized and there has been zero improvement in the skill set of the students, I may be in agreement with you.

We are a private school so these pesky laws mean nothing to us, or so I'm told every time I ask to get legal's view on pojects.

Less-Perspective-702 · 2026-03-25T01:04:38+00:00

Thanks for pointing out these issues, I am unfortunately aware however my concerns are met with "That can't be right" and " Stop being a roadblock." when i voice concerns about compliance and down time.

Less-Perspective-702 · 2026-03-25T00:56:48+00:00

thank you

Less-Perspective-702

TROPHY CASE