illinois cto summit 15 presentation - privacy and security - keith bockwoldt

High School District 214

Data Security/Privacy

1

CTO SummitChicago, IL

June 22, 2015

_________________________________________________________________________________

Keith Bockwoldt: Director, Technology Services


Who We AreSchools

2

Alternative School Programs The Academy at Forest View Vanguard School Newcomer Center Young Adult

4

Comprehensive High Schools Buffalo Grove High School Elk Grove High School John Hersey High School Prospect High School Rolling Meadows High School Wheeling High School

6

12,100

Staff 870 Certified teachers;

774 with Masters or higher 398 Education Support Staff 165 Custodial/Maintenance 141 Administrators/supervisors

1,574

Students Reside in

8 communities

northwest of

Chicago

2012-2013 Data


Data Services Agreement

1. Contract Scope: Identify all elements that comprise the agreement and what order of precedence is followed in the event of a contradiction of terms.

2. Purpose: Determine if the provider qualifies as a school official under FERPA. Determine the nature of data collected and purpose for which any FERPA protected information is being disclosed.

3. Data Collection, Use and Transmission: Specify how the provider may use or collect data from the school system. Specify the provider should only be permitted to use any information stored, processed, or collected as necessary to perform the services for the school system.

4. Data Security: Specify any security requirements the provider must follow to maintain, process or store information on behalf of the school system.



5. Data Retention and Disposal: Assure the proper management and disposal of data or information pertaining to the School or students. All data disclosed to or collected by the provider must be disposed of by secure means to ensure its protected from unauthorized access.

6. Bankruptcy or Acquisition: Specify what happens to the data if the provider goes out of business or is acquired by another firm. Is there a source code or escrow provision.

7. Service Levels and Support: Specify the service levels the provider must meet and any credits you receive for any failure by the provider to meet these services levels.

8. Governing Law and Jurisdiction: Typically a providers default contract will specify it is governed by law of the providers home state. Check with you legal counsel about what law govern contracts entered into by your School.



9. Modification, Duration , and Termination Provisions: Establish how long the agreement will be in force and what the terms will be for modifying the terms of the agreement.

10.Liability: The provider should be liable for the activities of its staff and subcontractors. The includes breaches to security, damage to property, or unauthorized third party access. The provider should indemnify the School System from any claims or damages that arise out of the providers negligence.



Thank You

Keith Bockwoldt: [email protected]


Whats Happening in School Districts

7,000 attacks in one day. Average 6,500 per day



Average 50,00 per week



Average 800,000 per month

illinois cto summit 15 presentation - privacy and security - keith bockwoldt

Documents