Cyber risk control that people actually use
CyberPools grew out of an IT consulting firm that has served public entities for 25 years. We began delivering cybersecurity to school districts through a school risk pool in 2013, and have since grown to serve organizations and pools in nearly 30 states.
Our work helps members strengthen their security and show insurance carriers that they are well protected, so coverage stays within reach.
Why schools
Education is one of the most targeted sectors for cyber attacks. Schools hold large amounts of sensitive personal information, and students, parents, staff, contractors, boards and the public all need some access to their systems. That makes for many ways in.
Most of our members are schools and education organizations. The same Toolkit works for other public entities, whether they have a mature security program or are just starting one. We work as an extension of their team.
How we work
Simple
Easy to understand and put in place.
Clear
Communication and documentation that leave no room for misunderstanding.
Manageable
Solutions your existing staff can maintain.
Actionable
Recommendations that lead directly to real improvements.
Impactful
A measurable difference in your security and your insurance outcomes.
The cyber services provided by Gates Consulting (dba CyberPools) have helped our members feel more confident in their cyber posture and given them and their governing boards comfort in an ever challenging and changing cyber world. The CyberPools team has been responsive to our member's needs, including implementing the toolkit services to members, consulting on a variety of topics, and presenting to members.
The team behind the Toolkit
Our team has held CIO, CISO, network engineering, system administration and development roles, much of it inside schools and public entities. We don't publish staff names here. It keeps our people from becoming a target for the same attacks we help members stop.
Certifications
- CISSP
- CompTIA Security+
- CompTIA Network+
- CompTIA A+
- CompTIA Project+
- Microsoft Certified: Security, Compliance, and Identity
- Juniper JNCIA-SEC
Education and training
- MBA
- B.A. in Information Technology
- B.S. in Computer Science, cybersecurity focus
- Governance and risk management training
- AI and security training, University of Arizona
Core expertise
Leadership and strategy
CISO and CIO experience, vCISO consulting, strategic security planning and organizational risk management.
Technical operations
Network architecture, system administration, identity and access management, MFA and EDR deployment, and infrastructure security.
Security assessment
Risk assessments, vulnerability scanning, security control validation and compliance review.
Development and engineering
Full stack development, secure coding, security automation and custom security tooling.
Education and awareness
Security awareness training, phishing simulations, incident response exercises and staff education.
A decade of risk control
Risk control services delivered each year.*
About 13,900 services since 2016.*
| Year | Services | Cumulative |
|---|---|---|
| 2016 | 200 | 200 |
| 2017 | 400 | 600 |
| 2018 | 650 | 1,250 |
| 2019 | 900 | 2,150 |
| 2020 | 1,300 | 3,450 |
| 2021 | 1,650 | 5,100 |
| 2022 | 1,900 | 7,000 |
| 2023 | 2,150 | 9,150 |
| 2024 | 2,300 | 11,450 |
| 2025 | 2,450 | 13,900 |
Work with a team that knows schools
Tell us about your pool or organization.
* Figures are internal estimates of cumulative activity since 2016, rounded down. They are not audited counts.