District outlines cyber-fraud safeguards after vendor phishing incident; professional development and wellness evaluations presented

District staff briefed the board on cybersecurity steps taken after a sophisticated phishing attempt that compromised a vendor account, and administrators presented program evaluations for the professional development committee and for district wellness.

On cybersecurity, administration and technology staff said the incident prompted changes to payment and account controls and reinforced existing technical protections. The district has implemented multi-person verification for payment-change requests, strengthened password rules (minimum 14 characters), and requires two-step verification for elevated accounts (made mandatory for all staff with admin access in spring 2023). Technology staff said they use daily network and system monitoring, Sophos endpoint detection on district devices, Securly web filtering for students and staff, managed student devices (only approved apps can be installed), and a firewall monitored daily. The district will add a 30-minute, in-person professional development session for each building on email safety and phishing awareness in 2025-26.

The board also discussed a previous, older cyber incident that the administration said was handled through legal settlement and therefore remained in closed session while pending; the meeting record said that event dated about four years earlier had been resolved.

Dr. Miller presented the professional development committee's annual program evaluation. She said the committee is composed of elected teachers from each building and that district professional learning is aligned to the Comprehensive School Improvement Plan (CSIP) and building goals. The district sets aside 1 percent of certain funds for required professional development; committee members may elect career-ladder hours or a stipend for work on the committee. Miller highlighted expanded offerings, targeted support for early-career teachers and work on instructional strategies that the district has used to reduce discipline referrals. She stated the evaluation requires board approval; the transcript records discussion and Q&A, but no formal board vote on the program-evaluation approval during this meeting.

District nurse and wellness committee representatives presented the wellness program evaluation. The wellness committee is an 18-member, cross-staff group that organizes incentives and events (for example, step challenges, a mental-health-awareness event, flu-season information and wellness bingo). Administration noted some measurable wellness indicators had declined versus the prior report even as committee engagement activities increased; staff said the committee will coordinate more closely with district health-plan resources and communications to increase participation in screenings and preventive activities. The meeting record does not show a recorded vote on the wellness evaluation.

Why it matters: Cybersecurity controls protect district finances and student data; professional development and wellness programs affect instructional quality and staff retention.

Next steps: Administration will continue technical monitoring, deliver school-level email-safety PD next year, and bring the professional development program evaluation back for formal board action if/when required.