SchoolMessenger

   EdTech
SchoolMessenger is a platform for parent and community engagement. It offers school notification, school websites, school mobile apps, and more, under one platform. SchoolMessenger offers a range of products for school notification, website, mobile app, chat, attendance, and more. More than 63,000 schools across North America have used SchoolMessenger to communicate with their communities.

SchoolMessenger was owned by West Corporation during the Dunton Consulting, Inc. engagement, it is now part of PowerSchool.

Dunton Consulting, Inc. develops InfoSec Framework and supports portfolio rationalization for SchoolMessenger app.

Challenge

The consulting engagement had two components. Document and develop the SchoolMessenger’s information Security framework, produce information security policies and procedures. The secondary related component was to provide support for SchoolMessenger portfolio rationalization; assist in the inventory and documentation of products, applications, and supporting assets.

Solution

Dunton Consulting, Inc. adopted, modified, and produced InfoSec policies and procedures to address internal security audit findings. The SchoolMessenger InfoSec framework, policies, and procedures also were aligned to West Corporation’s overarching InfoSec policies and procedures. Coordination with portfolio rationalization efforts supported inventory and documentation of products, applications, and supporting assets.

Policies and procedures were informed by International Organization for Standardization (ISO) and by the International Electrotechnical Commission (IEC), ISO/IEC 27002 – 5, and the cybersecurity framework identified in Executive Order no. 13636, for Improving Critical Infrastructure Cybersecurity. The policies and procedures supported the protection of personally identifiable information as compliant with federal and state laws protecting the confidentiality of personal information, and under general, professional ethics.

Result

The framework and supporting policies governed the creation, documentation, and use of InfoSec policies and procedures for SchoolMessenger. Officers, agents, employees, contractors, temporary workers, and volunteers were responsible to read, understand, and comply with this these policies. The effort supported the SchoolMessenger portfolio rationalization work products and inventory.