Conversation

🏆 New Achievement! Four Months of Homework You Didn't Submit!

Welcome to Module Seven: Detecting Unauthorized Access Before It Becomes a News Story. Educational Testing Service, the nonprofit that runs standardized assessments for California, failed this module. An unauthorized party was quietly copying files from ETS systems from May 22 all the way through September 18, 2026 — roughly four months — before anyone noticed. (1/3)

California's Department of Education began notifying students and families on October 16. The state enrolled over 5.7 million students last school year, so the class size here is considerable.

This module's remediation exercise: implement continuous monitoring and access anomaly detection so exfiltration lasting four months becomes exfiltration lasting four minutes. (2/3)