District outlines cyber-fraud safeguards after vendor phishing incident; professional development and wellness evaluations presented

District staff briefed the board on cybersecurity steps taken after a sophisticated phishing attempt that compromised a vendor account, and administrators presented program evaluations for the professional development committee and for district wellness.

On cybersecurity, administration and technology staff said the incident prompted changes to payment and account controls and reinforced existing technical protections. The district has implemented multi-person verification for payment-change requests, strengthened password rules (minimum 14 characters), and requires two-step verification for elevated accounts (made mandatory for all staff with admin access in spring 2023). Technology staff said they use daily network and system monitoring, Sophos endpoint detection on district devices, Securly web…