About the Cybersecurity Rubric
What is the Cybersecurity Rubric, and how do I use it?
The Cybersecurity Rubric (CR) for Education is a powerful self-assessment tool that helps education leaders evaluate their current cybersecurity practices. Based on the Cybersecurity Framework for Education, the CR helps schools gain a clear understanding of their strengths and weaknesses, enabling them to improve their defenses and safeguard against threats. Learn more about the CR.
Is the CR free to use?
Yes, the CR and its associated resources are free for anyone to use.
How do I download the CR?
Visit the Cybersecurity Rubric website, click the Download Rubric button, and then select the version of the rubric you wish to download.
What formats is the CR available in?
The CR is available in Adobe PDF, Microsoft Excel, or Google Sheets (recommended version).
What is the CR Sidekick?
The CR Sidekick is an AI-powered assistant that guides you through CR evaluations with simple questions and recommendations.
I’m ready to start my first self-assessment. Where do I begin?
Gather existing cybersecurity documentation (e.g., policies, training records, access controls) to guide your rubric responses. Only mark levels supported by evidence, gaps highlight where to start improving.
What is the CR Academy?
The Cybersecurity Rubric (CR) Academy offers free training on how to use the CR to self-assess your school’s cybersecurity practices. The Academy also has the certification course to become a Certified Cybersecurity Rubric Evaluator (CCRE).
How do I create a CR Academy account?
Register for a free CR Academy account. Note: If your school uses ClassLink, click the Sign In with ClassLink button.
Certified Cybersecurity Rubric Evaluators (CCRE)
Who can become a CCRE?
The CCRE training and certification are designed for individuals interested in assisting schools in reviewing their cybersecurity readiness. Applicants do not need prior cybersecurity experience to earn this certification.
How can I use a CCRE certification?
Third-party cybersecurity evaluations for school systems can be conducted by individuals, state departments of education, regional education agencies, or companies. These evaluations may be offered free or for a fee, with agencies and companies certifying staff to provide cybersecurity evaluation services to the schools they serve.
What’s involved in becoming a CCRE?
CCRE certification requires passing the exam with an 85% or higher score, and the $99USD fee includes access to additional Cybersecurity Rubric (CR) training.
Can I take the CCRE exam more than once?
Yes, the CCRE exam can be retaken. The $99 USD purchase includes up to three attempts, with a required 24-hour wait period between the second and third tries.
How long does the certification last?
Your certification is valid for three (3) years from the date you successfully pass your exam.
Will I be notified when my certification is going to expire?
Yes, you will receive an email with an invitation to renew your CCRE credential.
What is required to renew my certification?
You can renew your CCRE certification by passing a 30-question exam with a score of 80% or higher, or by completing a portfolio that demonstrates at least 60 hours of Continuing Education Activities (CEAs).
How can I retrieve my CCRE Badge?
Log in to your CR Academy account. Then, click the Gamification Icon (Trophy) in the upper right, select Badges and Points at the bottom of the window, and use the Share Badge button for access options.
About the Cybersecurity Coalition for Education
What is the Cybersecurity Coalition for Education?
The Cybersecurity Coalition for Education is a group of leading EdTech organizations committed to making cybersecurity preparedness and training more accessible for schools.
The coalition pioneered a groundbreaking education-focused approach to measuring and improving cybersecurity readiness, the Cybersecurity Rubric (CR) for Education. Along with the rubric, the coalition provides training designed to guide schools to cybersecurity readiness.
How do I join the coalition?
Fill out the interest form on the CR website with a statement explaining why you want to join and how your organization can make a unique contribution.
What is the Cybersecurity Rubric (CR) Masterclass?
The CR Masterclass helps school systems strengthen their cybersecurity posture, without adding cost or disruption. Delivered by experts from the Cybersecurity Coalition for Education, the masterclass offers:
- Expert-led interactive training aligned with the latest NIST Cybersecurity Framework (CSF 2.0)
- Tailored guidance designed specifically for K-12 educational environments
- On-site delivery to reduce downtime and keep teams focused on immediate priorities
- Education-Focused Materials, including exclusive resources and additional training for long-term support
- A free exam waiver for the Certified Cybersecurity Rubric Evaluator (CCRE) certification—supporting professional growth for district technology teams
How do I request a masterclass?
Fill out the Contact Us form on the Cybersecurity Rubric website and indicate you’re interested in hosting a masterclass with one of our trainers. There is no charge from the coalition for a masterclass.
How can I become a masterclass facilitator?
Current CCREs can find more information about becoming a masterclass facilitator by filling out the Contact Us form on the Cybersecurity Rubric website.