Visibility, Speed, and Automation in Google Workspace Make a Difference for a Lean IT Team with Limited Funds
Farmington Municipal Schools in New Mexico serves approximately 11,000 students and manages over 13,000 Apple devices across its many campuses. As Assistant Director of Technology, Jeff Smith oversees everything from client and server management to the district’s cybersecurity posture.
With a lean team covering multiple schools and administrative sites, efficiency is essential. In addition to firewalls and content filtering tools, Farmington relies on ManagedMethods’ Cloud Monitor to protect its Google Workspace environment.
“We’re a 99% macOS district, and Cloud Monitor gives us the visibility we were missing in Google Workspace across all our devices. We can quickly detect suspicious logins, investigate improperly shared files, and respond to student safety concerns—all in one place.”
—Jeff Smith, Assistant Director of Technology, Farmington Municipal Schools
Challenges
Before implementing Cloud Monitor in 2022, Jeff describes Farmington’s approach to cybersecurity as reactive. “We just didn’t have the visibility we needed to know when something was going on. We relied on people alerting us to suspicious things in their inboxes.”
Investigating phishing attacks and suspicious logins was tedious and time-consuming, especially before they implemented multifactor authentication or had adequate visibility into account activity.
“Cloud Monitor is essential for any district with limited IT staff. It helps us automate security and student safety tasks, and stay on top of threats without burning out our team.”
—Jeff Smith, Assistant Director of Technology, Farmington Municipal Schools
Less-used staff accounts, such as custodians and part-time employees, were especially vulnerable. “If those accounts were compromised it wouldn’t necessarily flag as suspicious. We’d just see a login and think, ‘Okay, they logged in. No big deal.’”
Tracking down student safety issues was equally challenging. Incidents of cyberbullying, inappropriate sharing, or concerning content in Google Drive required staff to dig into student accounts manually. “Now we can see it—it pops up during the scan, we get all the information about the file or email we need, and we can act upon it right away.”
Results
With Cloud Monitor, Jeff now has real-time visibility and control over Farmington’s Google Workspace environment.
“When several staff accounts were compromised over winter break, Cloud Monitor alerted us to unusual activity. We were able to contain the breach before it spread—without it, the damage would’ve been much worse.”
—Jeff Smith, Assistant Director of Technology, Farmington Municipal Schools
Cloud Monitor automatically monitors logins, detects data loss risks, and flags safety concerns. “It speeds up the process of tracking down any kind of issue, whether it’s a malicious attack, staff inappropriately sharing something in a way they shouldn’t, or student safety risks,” Jeff says. “The biggest thing is the time savings and being able to automate policy enforcement.”
That efficiency proved advantageous during winter break in December 2024, when several staff accounts were compromised and began spreading malicious emails internally. “We were able to lock that down fast because we saw a whole host of suspicious logins all happening at 3:00 a.m.—and they were all from VPN connections,” Jeff recalls. “It was one of those things where you could tell they were probably testing our systems and response to plan a larger attack.”
Account takeovers are particularly dangerous during extended school breaks like winter or summer, when criminals know that there is less attention on securing systems. They exploit that lull to compromise credentials, escalate access, or quietly exfiltrate data.
“If you’re responsible for cybersecurity or student safety in a K–12 district, Cloud Monitor should be in your toolbox. It’s reliable, intuitive, and it works seamlessly with the tools most schools already use.”
—Jeff Smith, Assistant Director of Technology, Farmington Municipal Schools
Thanks to Cloud Monitor, Jeff’s team was able to catch the breach before it escalated further. “Being able to stop that attack very quickly before it impacted other systems was huge.”
Cloud Monitor also helps support student safety by flagging risks such as potential threats of violence, self-harm indicators, and cyberbullying in Google apps like Drive and Gmail.
Jeff shares that safety alerts are routed to the appropriate school-level administrators, helping them better understand and support students. “It’s had the added benefit of helping engage administration to be a little more cognizant of what’s happening in students’ lives,” he says.
For Farmington Municipal Schools, the decision to keep investing in Cloud Monitor comes down to practical value. “On top of keeping our students safer, it definitely helps us save time and resources,” Jeff says.
Automating policy enforcement, detecting risky third-party apps, and monitoring account activity gives his team the coverage they need to keep their students safe without adding headcount.
“Don’t ignore what you can’t see. That philosophy of ‘what you don’t know won’t hurt you’ is not great in cybersecurity,” says Jeff.
He recommends evaluating how you’re managing your Google environment and finding the right tools that fit your district’s needs. “For us, that happens to be ManagedMethods. Cloud Monitor is a great tool for K–12 districts, whether you’re using Google or Microsoft.”
Want to learn more about how Cloud Monitor and Content Filter can improve your school’s cybersecurity and safety? Claim your free Google Workspace and/or Microsoft 365 security and safety audit today.
