What this assessment is, and what it isn't
HB 44 (formerly HB 42) requires Utah Local Education Agencies to adopt a cybersecurity framework, with specific timelines and standards delegated to the Utah Cybersecurity Commission for rulemaking. This assessment helps you understand where you stand against the controls the Commission is most likely to require, in language you can take to a non-technical board.
What it is
- A self-scored snapshot, not an audit. Your answers and results stay on your device unless you choose to share them.
- Aligned to NIST CSF 2.0 and weighted for the controls most consistently called out for K-12: MFA, training, incident reporting, cyber insurance, and board-approved policy.
- "Not sure" is a valid answer. We treat it as a documentation gap to investigate, not a wrong answer to penalize.
- Vendor-neutral. UCA is a trade association, not a reseller. We do not score you to sell you anything.
What it isn't
- A statement of HB 44 compliance. The Cybersecurity Commission has not finalized rulemaking. This is preparedness, not certification.
- A formal audit. For an attestation or external review, you need a qualified third party.
- A pitch. There is no follow-up unless you choose to request one at the end.
Answers are saved automatically on this device. You can return to any earlier question to revise.
Score Breakdown
Six functions of the NIST Cybersecurity Framework. Govern, Identify, and Protect cover the foundation; Detect, Respond, and Recover cover what happens when something goes wrong.
Your Top Priority Gaps
The five highest-impact items to address first, weighted toward the controls most consistently called out for K-12 and HB 44.
Tools that help close these gaps
UCA publishes open-access templates that align with the controls in this assessment. No form, no email required.
Want a 30-minute readiness review?
Harborcoat, a UCA founding sponsor, offers a complimentary 30-minute review of your results with no obligation. They can help you turn this snapshot into a phased remediation plan and a defensible board update.
Vendor-neutral note from UCA: Harborcoat is a separate company that operates as a cybersecurity solutions provider. UCA does not receive a referral fee for this introduction. You are free to take this assessment to any provider of your choosing — or to handle remediation in-house.