Truth in IT
    • Sign In
    • Register
        • Videos
        • Channels
        • Pages
        • Galleries
        • News
        • Events
        • All
Truth in IT Truth in IT
  • Data Management ▼
    • Converged Infrastructure
    • DevOps
    • Networking
    • Storage
    • Virtualization
  • Cybersecurity ▼
    • Application Security
    • Backup & Recovery
    • Data Security
    • Identity & Access Management (IAM)
    • Zero Trust
    • Compliance & GRC
    • Endpoint Security
  • Cloud ▼
    • Hybrid Cloud
    • Private Cloud
    • Public Cloud
  • Webinar Library
  • TiPs
  • DRAW

Zscaler: NYC DOE Secures 2M+ Devices with Zero Trust Security

Zscaler
10/09/2026
0 (0%)
Share
  • Comments
  • Download
  • Transcript
Report Like Favorite
  • Share/Embed
  • Email
Link
Embed

Transcript


I worked in cybersecurity for 17, and I would say at the mark of the 15 year is where I really started looking at a zero-trust type of strategy. I was born in Brooklyn, New York. I'd grown up on zero-trust. If someone asked me for directions, I'd ask them who, what, when, and how. That's just my mantra of growing up in New York City, you never trust anyone. At the time of the pandemic, we had to innovate very quickly to ensure that students don't miss a beat when it came to instruction. The scale is always the biggest challenge of trying to touch different devices and people, not just to students, but also administrators, because this was a new world for them. ZSky has been a great partner with us helping solve some of those challenges, but also bringing them to a world of zero-trust. We started off utilizing ZIA in a very traditional manner. It was to look at the network traffic and do content filtering for our devices while we're on-prem. We went from just blocking websites and content and URLs to actually a full-on network security solution. And for me, that's where our journey really started. Second tool that we utilize is ZPA, which we use as a placement for VPN. We're looking to expand that use case, and now we're looking into applications and how we utilize applications, how we utilize data, and move forward into our zero-trust journey. Fast forward, after the pandemic, we worked with ZSky and started utilizing ZDX to get that visibility, to see how the devices are working. We utilize ZDX to maintain and monitor our Chromebook fleet, as well as our iPads, because those are remote learning devices. We found lots of network issues that we found out in our environment, as well as DNS issues that we were able to solve. So ZDX has opened up the world to us, not just from a security perspective, but from a network performance perspective as well. ZSky offered so much to us and was able to do things at scale and speed that we were unable to accomplish before then. So we've seen a decrease in attacks, I'd say probably about 15%, but we also see an increase of things blocking by 40%. So AI, I'm concerned about the usage of it, but I also love the innovation of it. Figuring out how students are actually using AI and what they're using it for will be great for us, but not just the students, but employees, how employees are using AI, which AIs are they using, why are they using them, and where they're getting from will be great from a DOE perspective to understand what we're doing with AI, and I think ZSky can be a good partner there to help us find out the answers to those questions. ZSky is a company to help us move faster, quicker when it comes to incident response, finding that needle in the haystack, threat hunting, and proactively finding threats to our network and our customers and our identities and our data, not just DOE, but all customers.

TL;DR

  • NYC DOE implemented a zero trust architecture with Zscaler to secure over 2 million devices across students, staff, and administrators during and after the pandemic transition to remote learning.
  • The security stack evolved from basic content filtering to include ZIA for network security, ZPA as a VPN replacement, and ZDX for device performance monitoring across Chromebooks and iPads.
  • Measurable outcomes include a 15% decrease in attacks and 40% increase in threat blocking, while ZDX revealed previously unknown network and DNS issues affecting device performance.

Summary

Demond Waters, CISO of the New York City Department of Education, shares how the organization transformed its security posture through a comprehensive zero trust strategy implemented with Zscaler. Managing over 2 million devices across students, teachers, and administrators, the DOE faced unprecedented challenges during the pandemic that required rapid innovation to maintain secure, uninterrupted instruction. Waters describes the evolution from basic content filtering with ZIA to a full network security solution, the replacement of traditional VPN with ZPA for secure application access, and the deployment of ZDX for visibility into remote learning device performance. The results have been significant: a 15% reduction in attacks and 40% increase in threat blocking. Looking ahead, Waters highlights AI governance as a key focus area, seeking to understand how students and employees are using AI tools across the organization, positioning Zscaler as a partner for both security enforcement and visibility into emerging technology adoption patterns.

Chapters

0:00 - Background and Zero Trust Philosophy
0:28 - Pandemic-Driven Innovation
0:51 - Zscaler Product Implementation
1:55 - Security Outcomes and Results
2:12 - AI Governance and Future Direction

Key Quotes

0:16 "I was born in Brooklyn, New York. I'd grown up on zero-trust. If someone asked me for directions, I'd ask them who, what, when, and how."
1:55 "Zscaler offered so much to us and was able to do things at scale and speed that we were unable to accomplish before then."
2:02 "So we've seen a decrease in attacks, I'd say probably about 15%, but we also see an increase of things blocking by 40%."

FAQ

How did NYC DOE handle the scale of securing millions of devices during the pandemic?

The DOE partnered with Zscaler to leverage cloud-based security that could scale rapidly. They used ZIA for network security and content filtering, ZPA to replace VPN for secure application access, and ZDX to monitor device performance across their Chromebook and iPad fleet used for remote learning.

What measurable security improvements did NYC DOE achieve with Zscaler?

The DOE reported a 15% decrease in attacks and a 40% increase in threat blocking after implementing the Zscaler zero trust platform across their environment.


Categories:
  • » Webinar Library » Zscaler
  • » Cybersecurity » Zero Trust
  • » Cybersecurity » Cloud Security
  • » Data Protection
Channels:
News:
Events:
Tags:
  • Zero Trust
  • Cloud Security
  • Customer Story
  • SASE
  • SSE
  • Zero Trust Architecture
  • K-12 Education Security
  • Remote Learning Security
  • Device Fleet Management
  • VPN Replacement
  • Network Performance Monitoring
  • AI Governance
  • Threat Blocking
  • Public Sector Cybersecurity
Show more Show less

Browse videos

  • Related
  • Featured
  • By date
  • Most viewed
  • Top rated
  •  

              Video's comments: Zscaler: NYC DOE Secures 2M+ Devices with Zero Trust Security

              XStreaminars (watch here)

              • Oct
                28

                EnvZero: Near-Zero Time to Resolution--Live Agentic Remediation for Failed and Drifted Infrastructure

                10/28/202601:00 PM ET
                More events

                Industry Events (Sponsor Hosted)

                • Oct
                  13

                  Transitioning from CJIS to FERPA: Essential Audit Evidence for Compliance

                  10/13/202601:00 PM ET
                  • Oct
                    15

                    Risk in Real Time Demo Series: Virtual Patching: Protection at the Speed of Exploitation

                    10/15/202611:00 AM ET
                    • Oct
                      20

                      Harnessing Data Governance for AI with Cyera and Snowflake

                      10/20/202611:00 AM ET
                      • Oct
                        27

                        Maximize Security, Value, and Returns on Your Microsoft Investment

                        10/27/202611:00 AM ET
                        • Oct
                          27

                          The HUMAN Experience: Real-Time Insights into Page Intelligence

                          10/27/202601:00 PM ET
                          More events

                          Upcoming Webinar Calendar

                          • 10/13/2026
                            01:00 PM
                            10/13/2026
                            Transitioning from CJIS to FERPA: Essential Audit Evidence for Compliance
                            https://www.truthinit.com/index.php/channel/2159/transitioning-from-cjis-to-ferpa-essential-audit-evidence-for-compliance/
                          • 10/15/2026
                            11:00 AM
                            10/15/2026
                            Risk in Real Time Demo Series: Virtual Patching: Protection at the Speed of Exploitation
                            https://www.truthinit.com/index.php/channel/1372/risk-in-real-time-demo-series-the-autonomous-era-orchestrating-a-resilient-enterprise/
                          • 10/20/2026
                            11:00 AM
                            10/20/2026
                            Harnessing Data Governance for AI with Cyera and Snowflake
                            https://www.truthinit.com/index.php/channel/2137/harnessing-data-governance-for-ai-with-cyera-and-snowflake/
                          • 10/27/2026
                            11:00 AM
                            10/27/2026
                            Maximize Security, Value, and Returns on Your Microsoft Investment
                            https://www.truthinit.com/index.php/channel/2178/maximize-security-value-and-returns-on-your-microsoft-investment/
                          • 10/27/2026
                            01:00 PM
                            10/27/2026
                            The HUMAN Experience: Real-Time Insights into Page Intelligence
                            https://www.truthinit.com/index.php/channel/2139/the-human-experience-real-time-insights-into-page-intelligence/
                          • 10/28/2026
                            01:00 AM
                            10/28/2026
                            [APAC:] Secure AI Everywhere: Visibility, governance and protection for the agentic era
                            https://www.truthinit.com/index.php/channel/2125/apac-ensuring-comprehensive-security-for-ai-applications/
                          • 10/28/2026
                            06:00 AM
                            10/28/2026
                            [EMEA:] Secure AI Everywhere: Visibility, governance and protection for the agentic era
                            https://www.truthinit.com/index.php/channel/2127/emea-ensuring-ai-security-across-all-platforms/
                          • 10/28/2026
                            01:00 PM
                            10/28/2026
                            [AMERICAS:] Secure AI Everywhere: Visibility, governance and protection for the agentic era
                            https://www.truthinit.com/index.php/channel/2126/securing-ai-across-the-americas-strategies-and-insights/
                          • 10/28/2026
                            01:00 PM
                            10/28/2026
                            EnvZero: Near-Zero Time to Resolution--Live Agentic Remediation for Failed and Drifted Infrastructure
                            https://www.truthinit.com/index.php/channel/2179/envzero-near-zero-time-to-resolution-live-agentic-remediation-for-failed-and-drifted-infrastructure/
                          • 11/04/2026
                            11:00 AM
                            11/04/2026
                            Leveraging CISA’s Zero Trust Maturity Model in an AI-Driven Landscape
                            https://www.truthinit.com/index.php/channel/2149/leveraging-cisas-zero-trust-maturity-model-in-an-ai-driven-landscape/
                          • 11/04/2026
                            11:00 AM
                            11/04/2026
                            Aligning Agentic Intent: Understanding Your Agents' Purpose vs. Their Actions
                            https://www.truthinit.com/index.php/channel/2158/aligning-agentic-intent-understanding-your-agents-purpose-vs-their-actions/
                          • 11/05/2026
                            02:00 PM
                            11/05/2026
                            HUMAN Dialogue: Embracing the Rise of the Agentic Consumer in AI
                            https://www.truthinit.com/index.php/channel/2160/human-dialogue-embracing-the-rise-of-the-agentic-consumer-in-ai/
                          • 11/05/2026
                            02:00 PM
                            11/05/2026
                            Reclaim Your Evenings: Leverage Data Intelligence to Minimize Risk and Boost AI Adoption
                            https://www.truthinit.com/index.php/channel/2172/reclaim-your-evenings-leverage-data-intelligence-to-minimize-risk-and-boost-ai-adoption/
                          • 11/19/2026
                            01:00 PM
                            11/19/2026
                            360View: Govern, Secure & Recover Your Microsoft 365 Environment
                            https://www.truthinit.com/index.php/channel/2076/360view-govern-secure-recover-your-microsoft-365-environment/
                          Truth in IT
                          • Sponsor
                          • About Us
                          • Terms of Service
                          • Privacy Policy
                          • Contact Us
                          • Preference Management
                          Desktop version
                          Standard version