Board votes to shut TV‑3 after IT report finds critical vulnerabilities

The Portland Board of Public Education voted Nov. 25 to cease operations of TV‑3 after district IT presented an external security review showing multiple critical vulnerabilities in the Tightrope application that serves on‑channel playback.

Brian Newcomb, the district’s director of information technology, told the board an external vulnerability scan identified 16 critical and high findings; his team remediated seven but two high vulnerabilities require outside help. The Tightrope application has seven critical vulnerabilities in the district’s assessment and vendor support has expired. Newcomb recommended decommissioning the service to prevent a potential lateral network breach or ransomware attack.

“My recommendation is to improve your security posture, shut down TV‑3 immediately,” Newcomb said. Staff also presented two less urgent options: invest approximately $17,100 to replace and support the platform with ongoing maintenance costs, or outsource AV and transmission to a vendor at higher cost.

Board members asked about alternatives to preserve meeting access. Staff said meetings will continue to be livestreamed to Facebook and uploaded to YouTube, and that communications staff can post event recordings. The board voted to bypass a second read and then voted unanimously to approve the cease‑operations motion.

What’s next: IT will begin decommissioning the Tightrope servers. Staff said communications channels (Facebook, YouTube) will be used for meeting video and the district will consider whether to fund future recording or posting capacity during budget planning.