Get Full Government Meeting Transcripts, Videos, & Alerts Forever!
Get email alerts on the Ict Security Policy topic
No spam. Unsubscribe anytime.
Board hears first reading of proposed ICT security policy 10-65 to align district with federal privacy and cybersecurity standards
Summary
Board members received a first reading of proposed Policy 10-65 on ICT security, intended to align district practice with national cybersecurity frameworks and federal privacy requirements.
The board received a first reading of proposed Carson City School District Policy 10-65, Information and Communications Technology (ICT) Security. Superintendent Fielding presented the draft policy as a high-level foundation intended to support district cybersecurity standards, processes and procedures and to help the district align with national cybersecurity frameworks and controls.
The superintendent said the policy's broad scope is intended to give staff flexibility to adapt to evolving threats and noted that the draft references federal privacy and safety statutes the district must consider, including the Family Educational Rights and Privacy Act (FERPA), the Children's Online Privacy Protection Act (COPPA) and the Children's Internet Protection Act (CIPA). He described the policy as a first step that will undergird more specific standards and procedures developed by technical staff.
Trustees discussed placement and wording of a disclaimer in section 3 of the draft policy that acknowledges some data loss may be unavoidable; one trustee suggested moving that language to a footnote or otherwise de-emphasizing it. Another trustee asked whether the board should explicitly require that the policy be brought back for board review if it became outdated; the superintendent and other trustees noted the board already maintains a process for periodic policy review and that language about routine policy review is generally handled outside individual policies.
No action was taken; the item was presented for information and first reading only. The superintendent offered to return with clearer drafting and to consult the district IT lead on technical clarifications.
Why it matters: the draft policy frames the district's approach to cybersecurity and privacy and is intended to support compliance with federal privacy statutes that affect student data and online services. Trustees requested clearer placement of the disclaimer language and confirmation of the routine policy-review process before returning the policy for a second reading and approval.
