Our Commitment to cybersecurity

Our mission is to cultivate a secure and resilient environment for our district. We achieve this by adhering to the cybersecurity guidelines and standards set by the National Institute of Standards and Technology (NIST) and the Cybersecurity and Infrastructure Security Agency (CISA). At Del Valle ISD, we enforce these standards by implementing the NIST Cybersecurity Framework (NIST CSF) and the Texas Cybersecurity Framework (TxCF). This approach allows us to build a zero trust architecture focused on keeping our community and its data secure.

 

Our Cybersecurity framework

In compliance with Senate Bill 820 and to strengthen our cybersecurity posture, we are implementing the NIST CF and the TxCF at Del Valle ISD. The TxCF is a specialized framework designed for Texas educational institutions and aligns directly with the globally recognized NIST CSF. This approach allows us to proactively manage cyber risks and ensure the safety of our data and systems.

 

Zero trust architecture

With these frameworks as our guide, we are implementing a zero trust architecture. This security model represents the highest standard of data protection, built on the principle of "never trust, always verify." This approach ensures that our digital assets are secured by providing a foundation of trust and resilience for all district operations.

 

Software Security

At Del Valle ISD we are dedicated to software security and risk management by prioritizing digital tools that adhere to the CISA Secure by Design Pledge, are part of the Texas Data Privacy Alliance (TDPA), and are certified through the Texas Risk and Authorization Management Program (TX-RAMP). We favor products from developers who build security directly into their software from the initial design phase, which aligns with CISA's principles and significantly reduces vulnerabilities. By prioritizing TX-RAMP approved products, we ensure that all cloud computing services have undergone a rigorous security and risk assessment by the State of Texas.

Duo Multi-factor Authentication

Del Valle ISD offers multi-factor authentication via our Single Sign On (SSO) with Duo. Multi-factor authentication provides an extra layer of security to protect your identity and the district's data. At Del Valle ISD we use the DUO app. When you enroll in Duo MFA and attempt to login to your DVISD account, you'll receive a prompt from DUO on your smartphone, tablet, or Touch ID device to approve the login. This takes security beyond your username and password by verifying with DVISD's servers that you are who you say you are. Duo is required for all DVISD staff.

 

Access DUO's guides to learn how to register and manage your DUO account.

Click here to learn more about DUO and access their helpful resources.

 

---

 

Register to Use MFA for the First Time

If you have never used Duo MFA, you will need to register and set it up. Follow the steps below to register and setup MFA with your mobile device.

 

Step 1: Verify You're Ready to Register

Before you begin registration, make sure you have the following on hand:

• Your mobile device (smartphone or tablet).
• Computer
• Your DVISD Username and password.

 

Step 2: Download the DUO App

Download and install the DUO Mobile app on your smartphone or tablet.

• IOS
• Apple

 

Step 3: Begin Registration

On your computer:

• Check your DVISD gmail for the Duo enrollment link.
• When you login to your gmail or google account for the first time Duo Enrollment may launch automatically.
• Follow the prompts to proceed.

 

Step 4: Scan the QR Code with your mobile device

On your smartphone or tablet:

• Open DUO Mobile.
• Tap the plus (+).
• Hold your tablet or smartphone up to your computer to scan the QR code that displayed in step 3.
• Del Valle ISD will appear in the DUO app.

 

Step 5: Enrollment Complete

On your computer:

• A green checkmark will appear on your QR code.
• Click continue. You will receive a message that your enrollment was successful!

 

 

---

 

Use Your Registered Device with Duo MFA

Once you've registered your device for MFA, you'll be prompted to approve your log in whenever you attempt to access DVISD systems or services. All staff are required to use Duo MFA to access your account. Duo authentication options are listed below.

DUO Push

• The DUO mobile app will send a push notification to your mobile device.
• Tap Approve on your mobile device when you are signing in.

Duo mobile Passcode

• Open the DUO app on your mobile device.
• Click Show on your Del Valle ISD account.
• Enter the passcode into the DUO prompt on your computer and click verify.

Touch ID

• You can use Touch ID on any device with a Touch ID button.

 

 

---

 

Manage your Devices

If you already have registered a primary device for MFA, follow these steps to add a secondary device, manage device preferences, remove a device, or change a device name.

• Login to Duo self service.
• In the DUO prompt click Manage Devices and log in.
• Follow the prompts to add a new device or edit your existing devices.

 

Guidelines for Password Security

Purpose

This guideline aims to educate Del Valle ISD students and staff on the characteristics of a strong password and provide recommendations for secure password management, in alignment with NIST guidelines. This guideline applies to all Del Valle ISD students and staff with a district-provided account.

 

Guidelines

The following are general recommendations for creating a strong password:

• Be at least 15 characters in length.
• Contain both upper and lowercase alphabetic characters.
• Have at least one numerical character.
• Have at least one special character. (e.g. !,?,@,#,$,%, etc.)

 

Strong passwords should NOT include:

• Create a password that fails to satisfy the requirements for length, randomness, and uniqueness.
• Create a password that contains any personal information such as user id, family name, pet, birthday, etc.
• Reuse passwords between accounts.

 

The following are recommendations for maintaining a strong password:

• Do not share your password with anyone for any reason.
• Change your password upon indication of compromise.
• Consider using a passphrase instead of a password.
• Do not write your password down or store it in an insecure manner.
• Avoid reusing a password, especially one that has been compromised.
• Avoid using the same password for multiple accounts.

 

Additional Information

• Learn more on the recommended guidelines for password security from NIST here.
• Learn more on the recommended guidelines for password security from CISA here.

Compromised Account or System

If you suspect your system or account has been compromised please report by sending an email to cybersecurity@dvisd.net or call the Technology Department at 512-386-3050. If contacting by email, include the suspected issue in the subject of the email.

These instructions are for Del Valle ISD affiliates to report an issue with their District issued system or account.

• Disconnect the device from the network.
• It is important to NOT shut down the device and that NO further actions or commands be taken on the related system. Doing so may destroy relevant forensic data and impede our investigations.
• Contact the Cybersecurity team or Technology department immediately.
• Notify other users of the computer, if any.

 

Phishing Email

If you receive a phishing email please report using the Report Phishing button in gmail.