His framework centers on five incident types most likely to impact K–12: ransomware attacks, social engineering, data ...