Protect student records, research data, and institutional systems with BOSSS cost-effective security solutions designed for education.
FERPA
Compliance Ready
GLBA
Framework Support
NIST
Controls Mapped
State
Privacy Laws
We understand the unique security challenges facing education organizations.
Protect student education records and maintain required access controls.
Maximize security outcomes with constrained resources.
Manage students, faculty, staff, and guest access securely.
Secure aging infrastructure while modernizing operations.
Purpose-built solutions for education security and compliance.
Automated student record protection and access monitoring
Enterprise-grade security at education-friendly pricing
Automated provisioning for students, faculty, and staff
Security assessment and monitoring for legacy systems
Education-specific incident response playbooks
Secure research data and grant compliance
Five situations a university actually faces, from the registrar to the research enclave.
Alderwick State University — a composite organization in the BOSSS demo environment
The situation
The student information system encrypts, and grades cannot be submitted
A phishing email compromises a registrar workstation. Three days later the attacker moves laterally and encrypts the student information system and the shared academic file store — during finals week. Grade submission stops, registration for the next term stops, and an end-of-life integration layer turns out to be the reason the blast radius reached as far as it did.
Who is involved
Scenario timing
How BOSSS handles it
Mass encryption on the student information system is detected
Ransomware encryption of the SIS production cluster
Escalated to a full investigation case
Ransomware Investigation — Finals Week SIS Outage
Academic outage ticket opens and downtime procedures are invoked
SIS outage — grade submission and registration halted
Formal incident record covering the academic systems affected
Ransomware Encryption of the Student Information System
The legacy integration layer that widened the blast radius becomes its own finding
End-of-Life SIS Integration Layer Widened Ransomware Exposure
Continuity and recovery plans drive the restore from the DR site
Academic Continuity Plan
Board of trustees reporting closes the loop
Board of Trustees Security Report — Ransomware Incident
What this makes possible
What it touches
Entities
Alderwick State University
Registrar, Academic AffairsEllerton, OR
Locations
Alderwick Main Campus
Headquarters · registrar, academic affairsEllerton, OR
Campus Data Center
Data center · SIS hostingEllerton, OR
Alderwick DR / Backup Site
Disaster Recovery Site · restore sourceFairmont, OR
Applications
ScholarisSIS Production Cluster
EncryptedEllerton, OR
Academic shared file store
EncryptedEllerton, OR
Quillmark Learning Management System
Grade passback haltedEllerton, OR
Registrar workstation
Initial compromiseEllerton, OR
Vendors
Scholaris Student Systems
Student information systemMadison, WI
Quillmark Learning
Learning managementPortland, OR
Fernwood Endpoint Defense
Endpoint detectionSeattle, WA
Driftwood Security Analytics
SIEMBoulder, CO
Data
Student Education Record
~158,000 current and alumni recordsEllerton, OR
Grade & Transcript Record
~1.2M course-grade recordsEllerton, OR
Housing Assignment
~4,100 residentsEllerton, OR
Why BOSSS
Affordable, comprehensive security designed for the unique needs of educational institutions.
Key Benefits:
See how BOSSS can help your organization achieve security and compliance goals.
We use strictly necessary cookies to run this site. With your permission we would also use analytics and marketing cookies, including session recording. Cookie Policy