The compliance evidence layer for K-12
Audit-ready. Renewal-ready. Board-ready.
DistrictReady turns your district's security posture into the documents Florida requires: the ICP security summary, the auditor evidence pack, the insurance renewal answers, the quarterly board report. Generated from evidence, in minutes.
Built for the district IT director with one to three people on the whole team.
The problem, in your words
Three requests that land on the same desk.
The auditor's letter
The Florida Auditor General keeps finding the same things: access reviews, terminated accounts left active, missing risk assessments. Districts scramble for weeks to respond.
The renewal questionnaire
Insurers no longer accept "yes, we have MFA." They want coverage percentages, tested backups, and training records. Half of districts are seeing premiums rise anyway.
The board slide
"What are we getting for this spend?" is a fair question. Without trend metrics, there is no good answer.
How it works
Assess once. Keep the evidence current. Generate what is asked for.
Assess
A plain-language assessment built on the CIS Controls, the framework Florida's auditors actually use. Sized for a two-person IT shop, not a Fortune 500.
Evidence
Every control links to dated, versioned proof: MFA coverage, training records, backup tests, access reviews. Our freshness engine tells you what is stale before someone else does.
Generate
One click per obligation: ICP pack, auditor readiness pack, insurance renewal pack, board report. Reproducible, dated, defensible.
What comes out
The documents you already have to produce.
Each pack is assembled from the same control status and evidence, so the numbers in your board report and the numbers in your renewal answers agree.
ICP Component 7 pack
The cybersecurity component of your Instructional Continuity Plan, written from your current control status and the evidence behind it.
Auditor General readiness pack
Access reviews, account records, and risk assessment documentation gathered in one place, with dates, before the request arrives.
Insurance renewal pack
Renewal questionnaire answers with the coverage percentages, backup tests, and training records that support each one.
Quarterly board report
A short, plain-language report for the board: where the district stands, what moved this quarter, and what comes next.
CIPA / Form 486 pack
Your internet safety policy, its board adoption record, and the supporting documents that sit behind your Form 486 certification.
Incident and FIPA response kit
Notification templates, contact lists, and an incident log structured for reporting under FIPA, Florida's breach notification law (s. 501.171).
Start here
Get your free District Cyber Scorecard
The Scorecard is a short self-assessment: plain-language questions about identity, devices, data recovery, training, and governance, answerable from memory. The results come back as a scored PDF with your top gaps written in plain English. No account required.
We are building it now. Leave your details and we will send yours as soon as it is ready.
How we work
What we hold, and what we publish.
We hold zero student data.
DistrictReady stores control status and evidence about your systems, never student records. That keeps your FERPA surface unchanged and makes your security review of us short.
We measure ourselves the same way.
We are publishing our own self-assessment against the same CIS Controls we measure you on, and will link it here.
Who is behind this
A note from the founders
We're excited to launch DistrictReady and bring our decades of experience across regulated-industry compliance, defense program management, Florida cybersecurity policy, and software to the work of improving cybersecurity in Florida's school districts.
We started this because the districts carrying the heaviest reporting load often have the least help: one to three people running everything, answering to an auditor, an insurer, the FCC, and a school board. Proving the work should not cost more time than doing the work.
If your district is in that position, we would like to hear how you handle it today, whether or not you ever become a customer.
Bryan L.
Questions
Frequently asked questions
Is this a security tool or a compliance tool?
It is the compliance evidence layer. DistrictReady does not filter, monitor, or train. It records what your district has done and produces the documents that prove it.
Do we need to install anything?
No. Nothing installs on your network. The first version works from uploads and CSV templates, and connectors to Google Workspace and Microsoft Entra ID come later.
What does it cost?
Baseline assessments are fixed-fee by district size. Platform pricing is per-student with a small-district floor. Ask us and we will give you the number for your district.
Does this replace our IT staff?
No. It is built for a one to three person IT shop. It takes the document assembly work off your desk. It does not run your network.
What about charter schools?
Yes. DistrictReady is built for charter schools and charter networks as well as districts. Obligations vary by school and by authorizer, so we scope the work to the ones that apply to you.
Talk to us
Talk to us about a Baseline assessment
The Baseline is a fixed-scope assessment of your district against the CIS Controls, delivered with the evidence record and the document packs described above.
Tell us about your district and we will follow up with scope, timing, and what we would need from your team.