Even without robust funding, there are still free and low-cost steps K-12 schools can take to improve their cyber defenses, speakers said at a CISA event.