Carson City trustees receive first reading of district ICT security policy

The Carson City School District Board of Trustees heard a first reading of proposed Policy 1065, Information and Communications Technology (ICT) Security, during their regular meeting. Superintendent AJ Fielding presented the policy as a district-level framework for privacy, data protection and cybersecurity practices.

The policy matters because it is intended to create a foundation for more specific cybersecurity standards, processes and procedures the district will use to protect student and staff data. Fielding told trustees the policy is intentionally high-level to allow flexibility so the district can “rapidly adapt to evolving threats.” He said the policy is also meant to help the district align with national cybersecurity frameworks and controls.

Fielding summarized the policy’s aims: to support alignment with national cybersecurity frameworks and CIS controls, to protect district technology assets and data, and to help maintain compliance with federal laws including the Family Educational Rights and Privacy Act (FERPA), the Children’s Online Privacy Protection Act (COPPA), and the Children’s Internet Protection Act (CIPA). He said the draft policy is “not my area of specialty” but that the district’s IT lead, Raymond Maderas, prepared it and was ill that night.

Trustees asked clarifying questions about specific language. Trustee Walker suggested the disclaimer in section 3 (noting that data loss cannot always be avoided) be moved or tied to another section or presented as a footnote so it reads less like an unsupported caveat. Fielding said the language likely signals a limitation of perfect security but that the district could either asterisk the language or fold it into the compliance language.

Trustees also discussed whether an explicit obligation to return an out-of-date policy to the board for revision should be written into the policy. Fielding and other trustees noted the district already has a global policy-review process; one trustee recommended that the practice of regular review be acknowledged without embedding operational procedures into the policy text.

No vote was taken; the item was presented as a first reading and is scheduled for further review. Fielding said he will return with clarifications or edits requested by trustees and will consult with the policy author, Mr. Maderas, for technical answers.

Provenance: The discussion of Policy 1065 begins when Fielding introduces the draft and continues through trustees’ questions about the disclaimer and policy-review process. The transcript records Fielding explaining alignment with FERPA, COPPA and CIPA and trustees debating language placement and review cadence.