Cybersecurity doesn't need to break the bank. Starting with a detailed account of an actual incident, we'll talk openly about the state of security for anyone on a low budget. After, we'll focus on practical, low-to-no-cost strategies to bolster security across accounts, devices, and infrastructure. Presented in a "baseline, good, better" rubric, these simple yet effective measures—rooted in NIST standards and adapted from K12SIX.org—are designed to significantly reduce risk and improve your institution's security posture no matter your budget.