Security Requirements and Data Protection

Staff Report & Agenda Item Details

5. Security Requirements and Data Protection a. Authentication. Strong, unique passwords will be implemented on all District Devices, and multi-factor authentication (MFA) shall be enabled wherever technologically feasible. Sharing of credentials is strictly prohibited. b. Device Locking. Users must lock or log-off District Devices whenever the device is unattended, even temporarily. c. Secure Connection. Users may not connect District Devices to unsecure public Wi-Fi networks. d. Endpoint Protection. Antivirus, endpoint detection and response (EDR), encryption, and any additional security software deployed by the District will remain enabled and up to date at all times. Users may not alter or disable these controls. e. Data Storage. District information must be stored within District-approved Microsoft 365 services (e.g., OneDrive, SharePoint) or other sanctioned cloud repositories. Local storage on device hard drives or external media is prohibited unless expressly authorized by the Board. f. Confidentiality and Transmission. Confidential, privileged, or sensitive information will not be downloaded to personal devices, transmitted through personal email accounts, shared with unauthorized parties, or documented through photography or recordings.

This motion is scored as RESTRAINS_GOVERNMENT (Impact Weight: 2.8/10). Under the Bastiat Liberty Watchdog Index, voting YES on measures that cap or reduce ad valorem tax burdens, expand taxpayer exemptions, retire debt early, enforce competitive bidding caps, or remove regulatory/zoning barriers to private property rights earns a positive Pro-Liberty score.