News

As we conclude this year’s Cyber Resiliency and Preparedness Month, we as educators and staff play a vital role in helping students navigate the digital world safely. Whether they’re using school devices, accessing online resources, or communicating through digital platforms, students rely on us to model and reinforce smart cybersecurity habits.

Here are three simple ways you can support student cyber safety:

1. Model Strong Password Practices
   Encourage students to use complex passwords and avoid sharing credentials, even with friends.
2. Promote Responsible Online Behavior
   Remind students to think before they click, avoid suspicious links, and report anything that feels “off” or unsafe.
3. Recognize and Report Cyberbullying or Security Concerns
   Be alert to signs of online harassment or risky behavior and know how to escalate concerns through the proper channels.

! Call to Action ! Explore Cybersecurity Training in Vector

To deepen your understanding and strengthen our collective cybersecurity culture, we invite you to voluntarily explore the Cybersecurity Extra Training section in K–12 Vector Training. Short courses for Cybersecurity Awareness for Education Leaders include:

• Creating a Cybersecurity Culture
• Safeguarding Against Social Engineering Attacks
• End-User Best Practices

Let’s continue to lead by example and keep our students—and ourselves—safe online.

If after reviewing the resource you have any questions, contact Technology Support at (410) 313-7004 option 4 or TechSupport@hcpss.org

As part of our ongoing efforts to strengthen account security, HCPSS will enable Duo Number Matching for multi-factor authentication (MFA), effective this Friday, October 31, 2025.

This enhancement, also known as Verified Push, adds a short verification step to help prevent accidental or fraudulent approvals during login.

What’s Changing?

When logging in with Duo Push, you may occasionally see a three-digit number on your computer or device screen. To approve the login, simply select or enter that same number in the Duo Mobile app.

This feature helps ensure that only legitimate login attempts are approved, significantly reducing the risk of phishing or “push fatigue” attacks.

What You Need to Know

• The change takes effect Oct. 31, 2025.
• The number prompt may appear intermittently when using Duo Push through the Duo Mobile app.
• Duo Number Matching only applies to Duo Mobile push notifications, not YubiKey USB keys. If you use a YubiKey (USB key) for MFA authentication, this change does not affect you.

Call to Action

No immediate action is required. On Friday, Oct. 31 when you next login and are prompted for number matching, simply follow the on-screen instructions.

If you have any questions, contact Technology Support at (410) 313-7004 (option 4) or TechSupport@hcpss.org

Together, we can make HCPSS more secure — one smart click at a time.

The following is shared on behalf of the Maryland State Department of Education:

Phones in Focus is a national research study led by University of Pennsylvania Professor Angela Duckworth and other researchers. Its aim is to give educators an opportunity to inform and improve school cell phone policies and their implementation.

Last school year, 7,863 Maryland educators took the survey, ranking Maryland #2 in the nation for participation. Now, Maryland educators are asked to again join this landmark study on school cell phone policies. 

Access the survey at www.phonesinfocus.org.

• Just 5 minutes
• Completely confidential
• Be entered to win one of ten $500 gift cards
• Instant snapshot of national results
   

Do you enjoy singing? Please consider joining the Howard County Employee Chorus. No previous chorus experience necessary; just a love for singing. 

The chorus is open to all HCPSS employees, as well as their significant others and adult family members. The first rehearsal is Wednesday, Jan. 7 from 7-8:30 p.m. at Howard High School. More information will be sent to those who register.

Learn more about and/or sign up for the Employee Chorus at the following:

• Employee Chorus video
• Registration form

Contact Caleb Lee with any questions.

October is Cybersecurity Awareness Month, and this week’s focus is on Artificial Intelligence and Social Engineering, two growing tactics used by attackers to trick users into revealing sensitive data. By understanding how AI-driven scams and social engineering schemes work, you can help safeguard both your personal information and HCPSS systems.

Call to Action - Take a few minutes to review these quick awareness modules in KnowBe4 to learn how to recognize and report potential threats. Go to the Staff Hub and selecting Services > KnowBe4 > Library to find the following resources:

• AI and Sensitive Info Don’t Mix (2 mins)
• AI, Phishing, and Cybersafety (5 mins)
• Insights From a Hacker: Social Engineering Red Flags (10 mins)

When in the KnowBe4 Library, use the arrow on the right to see additional awareness modules.

If you have any questions, contact Technology Support at (410) 313-7004 (option 4) or abuse@hcpss.org

Together, we can make HCPSS more secure — one smart click at a time.

Due to rapidly escalating benefits costs, effective March 31, 2026, the Howard County Public School System (HCPSS) has made the decision to discontinue coverage of GLP-1 medications used for weight management. Additionally, no new prescriptions for GLP-1 medications for weight management will be approved after Dec.1, 2025. 

Employees receiving GLP-1 medications for diabetes treatment will not be impacted by this change in coverage.  

This change in coverage may be a difficult transition for some people. Those who currently use a GLP-1 medication for weight management are encouraged to utilize the time before March 31, 2026, to discuss treatment options with their provider.

The HCPSS Benefits Advisory Committee (BAC) has been deeply involved in evaluating the impact of escalating costs associated with GLP-1 medications and recommended the discontinuation of coverage for weight management. The BAC is composed of representatives of the Board of Education, each of the employee bargaining units, and from the retired employees’ association.

Throughout the past two years, the cost to HCPSS for coverage of GLP-1 medications for weight management has increased from $485,000 over a three-month span, to over $3.6M over three months. Without adjustments, employee premiums were projected to increase by 19.5% and the increase for HCPSS for fiscal year 2027 would have been 25.5% or $47 million. With the proposed changes, the employee premium increase will be 13.3% and the HCPSS increased allocation will be around $30 million.  

With this change in coverage, the CVS Weight Management Program, which was previously announced with the goal of reducing GLP-1-related benefits costs, will no longer be in place.

A new circular is now available for all staff. Circular #2017 - Asbestos Notification 2025-2026 serves as notification, as required by law, of the availability for public review of Asbestos Management Plans for the Howard County Public School System (HCPSS).

HCPSS circulars are to share information when that information is needed by staff systemwide and is not specific to a particular school/location or position/job class. All HCPSS staff are responsible for adhering to the guidelines and procedures outlined in the circulars. Circulars are released on July 1, and subsequently as needed throughout the year. When a new circular is added, staff will be notified via Staff Hub post/email. Circulars are available anytime in Canvas (staff login required), which also can be accessed from the Staff Hub under the Services dropdown menu.

Helping people use their strengths to overcome obstacles and unlock their potential is Barbara Baker’s passion. That same passion to help people problem-solve and achieve has driven Baker’s nearly 20-year career with the Howard County Public School System.

Learn more about Barbara and how her passions drive her role as HCPSS’ Facilitator of Extended School Year Services in this HCPSS Staff Focus article.

This following information is applicable to veterans only. 

As we prepare to honor Veterans Day, we would like to recognize and celebrate the veterans among our HCPSS staff. To do this, we are collecting information from staff members who have served in the military. If you are a veteran and would like to share this information, please complete this brief form if you have not already done so.

Generative AI is supercharging both sides of cybersecurity. Attackers are using it to write highly convincing phishing messages, clone voices, and scale “smishing” (texts) and “vishing” (voice) scams far beyond what we’ve seen before.

The good news: defenders benefit from AI, too  through faster detection, smarter response, and better user awareness.

What to watch for:

• Polished, personal emails or texts that create urgency (e.g., “Act now!”) or request MFA codes, wire transfers, or gift cards.
• Voice cloning calls that sound like a colleague, leader, or family member asking for money or credentials, often with intense urgency.
• Deepfake video or audio in meetings or messages. Clues include subtle lip‑sync issues, odd pauses, or mismatched lighting.

How to stay safe: 

1. Slow down and verify. If a message or call asks for money, data, or codes, call the sender back on a number you already trust.
2. Use MFA everywhere and never share one‑time codes.
3. Be mindful of your voice online. Just a few recorded words can be enough to convincingly clone a voice.

Call to action:
Explore available training resources to learn more . If you have any questions, contact Technology Support at (410) 313‑7004 (option 4) or abuse@hcpss.org.

Learn more (trusted references):

• FBI IC3 PSA: Smishing & AI voice (vishing) campaign—what to look for and how to respond. Read the PSA
• FTC Consumer Advice: How to spot and handle AI voice cloning scams. Fighting back against harmful voice cloning
• Microsoft Security—Cyber Signals: AI‑powered deception trends and defenses. Issue 9: Emerging fraud threats & countermeasures
• Microsoft 365 Tips: What are voice‑cloning scams and practical ways to protect yourself. Voice cloning scams explained
• Optional (Reporting beyond HCPSS): You can also file a report with the FBI at IC3.gov. Internet Crime Complaint Center