THE SHORT VERSION:
1) make a plan
2) Role play the plan
3) Fix what didn't work
4) iterate.
You can use Backdoors&Breaches to get started: https://www.amazon.com/Backdoors-Breaches-Incident-Response-Card/dp/B07Y3Y1XLP/ref=sr_1_2?keywords=backdoors&qid=1577813927&sr=8-2
Instructional video is here:
https://www.youtube.com/watch?v=TAiJVr0zWMw
THE LONG VERSION:
is really really long.
Im working on it, but it's gonna be a while.
However, it can be boiled down to this - think of the WORST thing that could befall your school. It likely has happened somewhere.
Jewish schools have had predators, fires, financial scams, drugs, firings, cyber crime, network attacks, and physical attacks and that's just off the top of my head.
No plan survives meeting the enemy. But having no plan means YOU won't survive meeting the enemy.
Having a plan is good. Testing that plan is better.
BackDoors and Breaches really looks only at technical issues. Which is great, but after you do that, and your people get used to roleplaying, add in some physical stuff. Start simple like a missing bus, work your way up through unhappy divorced parent, to missing funds and maybe even a visit from the FBI.
The more you do it, the better your preparedness when the stuff really hits the fan.
Joshua Bierman
Director of Technology
Yeshivat Noam