In our experience, it’s because the accountability infrastructure that would require integration doesn’t yet exist, and no one in the current funding framework has asked what lives between them. Physical security is funded through one bucket and audited (where it is audited at all) by one inspector. Cybersecurity is funded through another bucket and audited by a different one, if at all. The thing that lives in between the integration, the interfaces, the protocols that link physical to digital- does not have a clear owner in most state funding frameworks. It also does not have a clear owner in most district org charts.
That gap needs closing. It will not close on its own.
What Integrated School Safety Actually Looks Like
The districts we work with that get this right share a few characteristics.
Their access control systems are connected to their identity infrastructure through deliberate, audited interfaces, not by accident. When a credential is compromised in the digital system, the physical side knows about it within hours, not weeks, and the response is automatic rather than dependent on someone in another department remembering to call. Their security teams cover both estates: someone is named owner for what happens to physical access when our identity provider has a breach, and someone is named owner for what happens to digital systems when a key is physically stolen. Vendor and contractor access, often an afterthought in credentialing, is managed through the same integrated framework, not a separate spreadsheet.
Their training reflects integration. Staff is taught not just what to do in a lockdown, but how to recognize the early signs of compromise: an unfamiliar badge attempt, a system showing an authorized entry at a time the student is known to be off-site, a maintenance account logging in from a location it should not be.
And, most importantly, someone is responsible for measuring the integration itself. Not the physical estate. Not the digital estate. The interface. That role does not exist in most state funding frameworks. It rarely exists in district org charts. But the districts that have built it are the ones with a defensible answer to the question that is coming: what did your safety budget actually buy?
What State Funding Should Require Next
My children do lockdown drills at their school in Austin. So do millions of children in every state. The drill teaches them how to respond when the physical system is challenged. It does not prepare anyone for what happens when the digital system has been compromised in a way that makes the physical system unreliable. The next generation of school safety frameworks needs to close that gap, district by district.
● A single inventory that documents both the physical and digital systems in a school, and the interfaces between them. Not two lists, one connected list.
● A named owner at the district level for the integrated security posture, not just “the cameras” or “the firewall,” but the interface between them.
● A regular audit, not just an installation receipt. The question is no longer whether we installed the system. It is: does the system still do what it was funded to do, given the conditions it now operates in?
● A protocol that defines what happens, on the physical side, when the digital side reports a credential compromise, and vice versa.
● A reporting requirement back to the state on what specifically the funding bought, integrated against what.
These are not radical asks. They are the standard practices of critical-infrastructure sectors that figured this out a decade ago: power generation, transportation, hospital systems, and that school districts can borrow from without reinventing.
The Accountability Question, Restated
The Canvas breach was a warning, not a one-off. The accountability question that follows from it is not whether schools should spend more on cybersecurity. It is whether what they are already spending on physical security can be measured against the digital reality those systems now operate inside.
The next school safety debate will not be about dollars. It will be about whether the dollars bought a connected system. The time to build that case is now, not after.
