School Board Workshop

Staff Follow Up: 26-213 (AC)

Due Date: May 26, 2026

Topic: Meeting: April 28, 2026 – Workshop

2. Rule Development – Information Systems Division

Staff Follow Up: Present a comprehensive plan outlining recommended

safeguards, protocols, and accountability measures to protect

student and staff data.

Response: The District maintains multiple safeguards and risk-reduction

measures designed to protect student and staff information.

These include established data privacy policies, standards of

conduct governing the appropriate use of information

systems, ongoing monitoring by the Information Security &

Assurance (ISA) team, and dedicated security technologies

and personnel focused on reducing the risk of unauthorized

access, disclosure, or misuse of sensitive data. In addition, the

Risk Management/Data Privacy function helps ensure that

third-party vendor agreements include appropriate

requirements for safeguarding information and clearly defined

accountability provisions.

Consistent with Operational Security (OPSEC) principles, ISA

respectfully requests not to disclose specific technical or

procedural security controls, as doing so could reduce the

effectiveness of those protections and increase risk to students,

staff, and District operations.

HH/OBD:kg