Audit: district plans security testing and a disaster recovery update, due by 2027-28

What happened

The district's internal auditors recommended an outside cybersecurity test and a refresh of the disaster recovery and incident plans. In its Sept. 9 reply the district agreed and set June 30, 2028 for the security tests and June 30, 2027 for the plan updates.

Why it matters to families

Student and staff records are at risk if systems are not tested and plans are old. Other findings call for tighter control of user accounts and a device inventory.

The evidence

The district's Sept. 9 responses to the state Comptroller on the risk assessment and IT testing. The auditors' scanned reports are only partly readable.

The source