Board reviews cybersecurity guidelines; first read of password and network controls
Get AI-powered insights, summaries, and transcripts
Subscribe
Summary
District technology staff presented recommended cybersecurity and device‑access policies, including a reset to 90‑day password rotation, two‑step authentication rollout and engagement with vendor Stronghold; the board took a first read and expects final approval next month.
Technology staff and board members reviewed updated cybersecurity guidelines designed to reduce phishing and network-intrusion risk and to meet federal data-protection expectations.
Sarah (technology staff) described recent work to force the first password reset and move to a 90‑day rotation policy, the district's rollout of two‑step authentication, and use of network-detection software. "We've set the policy back to 90," Sarah said, explaining the district had required an initial reset and then relaxed cadence to 90 days. Staff also reported work with vendor Stronghold and plans to monitor and block phishing attempts that spoof district emails.
Board members discussed compliance checks (e.g., removing sticky-note passwords), the scale of technology across the district and the need to include cybersecurity training during professional-development days. The board conducted a first read of the policy changes and asked staff to return with any edits for final approval next month.
No formal vote was taken on the cybersecurity policy tonight; the presentation was informational and the board thanked the technology team for their work.