09/19/2016
Missouri State Auditor Nicole Galloway today released the results of a cybersecurity audit of the Orchard Farm Public School District in St. Charles County. The audit was conducted as part of a series of Cyber Aware School Audits. The initiative analyzes school data protection practices and offers recommendations to increase safeguards against unauthorized access to student records and information.
"This audit shows the Orchard Farm School District has made the security of student information a priority, and I am encouraged by their actions to ensure sensitive information remains secure," Auditor Galloway said. "This audit includes a series of additional recommendations the district can take to prepare against a data breach event."
Auditor Galloway recommended the district implement a comprehensive data governance program, which she calls "a critical task for any educational organization." The program would serve as a guiding document to prevent against unauthorized access to information in the district's possession. This level of preparation is necessary to ensure the confidentiality and integrity of student data. Without a formal program, the district cannot ensure that personally identifiable information is adequately protected and safe from unauthorized access, misuse or inadvertent disclosure.
The report recommends establishing a number of policies to strengthen the district's plans for preventing and responding to possible cyberattacks, and noted that precautions should be taken when working with vendors who contract with the district. Cybersecurity planning is only as effective as its weakest link, which is why any individual or organization with access to student information must follow strict guidelines related to how data will be accessed, and what protections are in place.
The complete Cyber Aware School Audit for the Orchard Farm School District is available online.
The Orchard Farm School District was one of five districts selected for the Cyber Aware School Audits. Audits have already been released for the Boonville School District in Cooper County, the Waynesville School District in Pulaski County, the Cape Girardeau School District in Cape Girardeau County, and the Park Hill School District in Platte County.
Since taking office, Auditor Galloway has made cybersecurity a priority across all components of government, including Missouri schools. The Cyber Aware School Audits are part of an ongoing emphasis on data protection practices and keeping Missourians' information secure. Last fall, an audit of the Department of Elementary and Secondary Education found the department was unnecessarily transmitting and storing student social security numbers in its Missouri Student Information System (MOSIS)- a practice the department has ended. The State Auditor's Office has also incorporated data security into the standard audit process.