Checkpoint 3.8

3.8 — Incident Response ProtocolsVerify state law

What this is

Documented procedures for responding to technology-mediated incidents — cyberbullying, AI-generated harassment, deepfakes, sextortion, AI misuse by students or staff, and data breaches. Defines roles, communication pathways, and coordination with mental health staff, law enforcement, and families.

Why it matters

Tech-mediated incidents are happening in every district. A documented protocol turns response into something districts can do consistently — supporting students, managing legal exposure, and capturing prevention insight. Deepfake harassment and sextortion in particular have escalated faster than most district protocols have kept up.

Connects to

The Framework: Condition #6 (Home/School/Community Partnership). Tightly paired with Counseling & Mental Health Integration (3.7). Distinct from 2.4 (Academic Integrity in the AI Era), which handles teacher response to suspected AI cheating; 3.8 owns the district-level safety-incident response work.

Maturity levels

Not Started
No protocols. Response is ad hoc and principal-by-principal. Staff unsure who to contact or what steps to follow. Families learn of incidents from their children, not the school.
Emerging
General incident response exists but does not specifically address deepfakes, AI-generated content, sextortion, or AI-specific misuse. Inconsistent across schools. Mental health staff sometimes looped in, sometimes not.
Established
Specific protocols for each incident type (cyberbullying, deepfakes, sextortion, AI misuse, data breaches). Staff trained. Clear reporting pathways. Integrated with mental health response, law enforcement coordination, and family communication.
Expanding
Protocols reviewed annually against emerging threats. Trauma-informed response embedded throughout. Student and family debrief after serious incidents. District tracks de-identified incident data to inform prevention, curriculum, and policy updates. Protocols rehearsed, not just documented.

Go deeper with

Example resource
CISA K-12 cybersecurity and incident response resources
Also consider