The rise in cyber-related attacks targeting school districts is outpacing cybersecurity readiness, as education institutions in the USA continue to fall victim to online threats (Levin, 2022). The education industry has been slow to react to an increasingly dangerous security landscape, leading many schools to become prime targets and victims of cyberattacks (Government Accountability Office, 2020). The responsibility of maintaining cybersecurity in K-12 schools in the recovery stage of a cyber incident cannot be shouldered by technology and information security personnel alone, "change must come from the top down" (CISA, 2023, p.2). The primary objective of this study was to examine the decisions and perspectives of school superintendents concerning their response and recovery strategies after a cyber incident had occurred within their district. Through in-depth interviews, five themes surfaced: crisis management; the essential role of leadership during a crisis; human approaches to technical issues; schools as communal crossroads; and the evolving role of school leaders in a digital age. When mapped visually, and explored through a sociotechnical lens, five core principles of cyber-resilient leadership emerged at the heart of each theme's central intersection. The findings of this study provide actionable insights for educational institutions to proactively address cybersecurity threats and emphasize the vital role of leadership in navigating the growing cyber incidents occurring in the nation's K-12 schools. [The dissertation citations contained here are published with the permission of ProQuest LLC. Further reproduction is prohibited without permission. Copies of dissertations may be obtained by Telephone (800) 1-800-521-0600. Web page: http://www.proquest.com.bibliotheek.ehb.be/en-US/products/dissertations/individuals.shtml.]