Exhibit_10_Collin_College_Cyber_Security_Narrative.docx
DOCX document 15 KB Posted
- Attached to
- District Insurance - Property and Cybersecurity
- Solicitation number
- FY2026-RFP-061
- Issued by
- Collin County, Texas
About this file
This document is a cybersecurity narrative exhibit for Collin College, a Texas public institution of higher education participating in a district insurance procurement opportunity. Collin College maintains a comprehensive cybersecurity program governed by the Texas Administrative Code Chapter 202 Information Security Standards and participates in the annual Texas Cybersecurity Framework assessment process. The College employs a risk-based approach integrating governance, risk management, identity and access management, vulnerability management, security awareness, incident response, and continuous monitoring. The cybersecurity program is led by Chief Information Security Officer Jake Walker and supported by seven full-time IT cybersecurity employees. Multi-factor authentication is implemented institution-wide, and all employees complete annual cybersecurity awareness training. Cybersecurity governance is embedded through collaboration among Information Technology, executive leadership, legal, compliance, audit, and business stakeholders.
Collin College recently experienced a security incident affecting its Canvas Learning Management System tenant operated by vendor Instructure, resulting in exposure of directory-level personally identifiable information, student identification numbers, messages, and course data. As of June 23, 2026, Instructure continues analyzing the incident's scope, with Collin College awaiting confirmation of validated exposed data. The College has identified no evidence of unauthorized access to its internal systems resulting from this incident and continues monitoring updates from Instructure to determine any necessary additional actions. This narrative supports the College's participation in the District's five-year property and cybersecurity insurance procurement, which runs from November 1, 2026, through October 31, 2031, and permits vendors to submit proposals for property and casualty coverage, crime insurance, and cyber insurance individually or in combination.
View the file
Other files
Show all 15
On GovTribe
Work with this file
- Download the original file
- Contacts named in this file
- Similar government files
- Ask GovTribe AI about this file
Text version
Collin College Chief Information Security Officer (CISO):
Jake Walker, jtwalker@collin.edu Total IT Budget:
Total Number of IT Employees:
Number of Full-Time IT Cybersecurity Employees: 7
Collin College maintains a comprehensive cybersecurity program designed to protect the confidentiality, integrity, and availability of institutional information and technology resources in support of its educational mission. As a Texas public institution of higher education, the College's cybersecurity program is governed by applicable state laws and regulations, including the Texas Administrative Code (TAC) Chapter 202 Information Security Standards. The College also participates in the annual Texas Cybersecurity Framework (TCF) assessment process to evaluate and continuously improve its cybersecurity maturity.
The College employs a risk-based approach to cybersecurity that integrates governance, risk management, identity and access management, vulnerability management, security awareness, incident response, and continuous monitoring. Multi-factor authentication is implemented to strengthen identity security, and all employees are required to complete annual cybersecurity awareness training as part of the College's ongoing security education program. Cybersecurity is embedded within institutional governance through collaboration among Information Technology, executive leadership, legal, compliance, audit, and business stakeholders. The College continually evaluates and enhances its security posture to address the evolving threat landscape while supporting the needs of students, faculty, staff, and the communities it serves.
Collin College was notified by Instructure, the provider of the Canvas Learning Management System (LMS), that certain information associated with our Canvas tenant was exposed as part of a recent security incident affecting the Canvas platform. Based on information provided to us so far by Instructure, the exposed data potentially consisted of directory-level personally identifiable information, Collin College-issued student identification numbers, messages, course setup, and course enrollment. According to Instructure’s Security Incident Update hub, as of 6/23/26, Instructure is still progressing with their data analysis of the incident. Collin College is awaiting further notice from Instructure on the validated and confirmed data that was exposed. The college continues to monitor information provided by Instructure and will take any additional actions deemed necessary based on updated findings or guidance. At this time, Collin College has not identified any evidence of unauthorized access to its internal systems resulting from this event.
File details come from the government source that posted it. Updated .