Opening: The Mission
Cybersecurity isn’t just about firewalls, encryption, or zero-days. It’s about people, the everyday users who click links, open attachments, and type passwords. I’ve built my career showing governments, enterprises, and schools that if we want to secure tomorrow’s world, we have to educate tomorrow’s users today.
That’s why I’ve spent years presenting everywhere from primary schools and middle schools to universities and government chambers. I’ve stood in front of the European Union Ministries with nothing more than a passport check to verify me before speaking to some of the most powerful leaders in the world. And I’ve stood in front of classrooms of kids who didn’t know what “phishing” meant until I explained it to them in plain language. Both matter. Both are part of the same mission: build a culture of security from the ground up.
The Opportunity in Atlanta
On October 1–2 2025, I served as the keynote speaker for the Hacker Halted Security Conference in Atlanta. While I’m in the city, I wanted to use my time for more than just the main stage. I asked my publicist to reach out to Atlanta Public Schools (APS) to offer a free, world-class cybersecurity education session for their students on Oct 3rd.
I do this because I believe in planting seeds early. Whether it’s speaking to kids in elementary school, teenagers in high school, or young adults preparing to enter the workforce, I’ve always made it a priority to give back. This isn’t about a keynote spotlight or brand promotion. This is about kids, the ones who are growing up in a world where their digital identity is as valuable as their physical one.
The Wall of Bureaucracy
Instead of a “Yes, let’s make this happen,” APS responded with paperwork. Not just a standard visitor check-in form. They handed me two multi-page documents:
- The Criminal Background Check Consent Form
- The Volunteer Release Form
At first, I thought this was the usual vetting process. I’m no stranger to security. I expected them to ask for a name, ID, and maybe a quick verification call. But as I dug deeper into the forms, what they demanded shocked me.
APS wanted:
- My Social Security Number
- My country and state of birth
- My eye color, height, weight, race/ethnicity, and gender
- Fingerprints uploaded into the Georgia Crime Information Center (GCIC) and FBI databases
- Consent that allows APS and the state to be immune from liability if they mishandle or leak that data
All this, not to hire me, not to put me on payroll, not to give me access to school systems, but simply to let me stand in front of a classroom and give a one-hour educational talk for free.
More Than the EU Demanded
Here’s the irony. When I presented to the European Union Ministries, the process was simple: show my passport. That was it. One official ID, and I was cleared to address leaders at the highest levels of government.
The EU, the same body that enforces the GDPR, the strictest privacy law in the world, protecting over half a billion people, trusted me with a simple ID check. But Atlanta Public Schools demanded more than the EU Ministries, more than international government entities, more than the TSA.
APS must believe they are more important than governments and ministries tasked with protecting national and international security.
The Privacy Problem
I’ve spent my career teaching people that data is currency. Once you give it away, you can’t get it back.
- A Social Security Number is the skeleton key to your identity.
- Fingerprints and biometrics are permanent markers that can’t be “reset.”
- Physical descriptors like eye color and weight are textbook identity theft fodder.
By forcing volunteers to provide all this information, APS creates an unnecessary attack surface. If those records are ever breached, and history tells us breaches in education systems are common, the damage to those who trusted the system could be catastrophic.
And remember, these aren’t paid employees. These are volunteers. People offering their time, skills, and energy for free. Yet the cost they’re expected to pay is their privacy.
The Bigger Hypocrisy
Every week, I see headlines about how schools are underfunded, overworked, and desperate for community support. Teachers are stretched thin. Programs are under-resourced. Budgets are cut.
But when a volunteer offers to bring cutting-edge cybersecurity education to the classroom, at no cost to the district, APS throws up bureaucratic roadblocks so invasive that only someone willing to forfeit their privacy rights could comply.
That’s not just short-sighted. That’s self-sabotage.
Who Really Loses
Here’s the part that really matters: this isn’t about me. I’ll still take stages around the world. I’ll still train enterprises, governments, and security professionals. But the students of Atlanta Public Schools lost an opportunity to hear directly from someone at the cutting edge of cybersecurity.
They could have learned how to recognize phishing emails before they became victims. They could have heard why their personal data matters, how to protect themselves on social media, and how hackers really think.
But instead, bureaucracy killed the opportunity before it ever began.
Final Word: Bureaucracy Is the New Breach
We live in a world where breaches happen daily. Sometimes they come from malicious actors. But sometimes, the breach isn’t in a firewall or a database. It’s in the system itself, a system so rigid, so overreaching, that it breaches the very mission it’s supposed to serve.
APS wants to protect students. I respect that. But when the safeguards become so extreme that they block legitimate, valuable education, the system isn’t protecting kids. It’s hurting them.
Here’s my bottom line: Bureaucracy is the new breach.
APS, you don’t get to complain about being short on help when you’re the ones preventing it.
About the Author
Len Noe is a Solutions Architect at BeyondTrust, Transhuman, Podcaster, International Cyber Security Speaker, Author, Technical Evangelist, and Biohacker with 11 implanted microchips. A former blackhat and ex-1% motorcycle club member with more than 30 years in technology, he has presented in over 70 countries and is featured in the documentary I Am Machine, which premiered at DEF CON 2025.