IE 11 Not Supported

For optimal browsing, we recommend Chrome, Firefox or Safari browsers.

Madison County Schools Examine Data Breach Protocols

A Kentucky school district's annual briefing on data breaches laid out who gets notified, in what time frame and how, so administration would have an unambiguous road map to follow in the event of a cyber attack.

data breach
(TNS) — The Madison County School Board were briefed on data breaches, along with several other items, during their Aug. 11 meeting on Thursday.

Director of Technology Ben Burnette gave his yearly presentation on data breaches to the school board.

"What is a data security breach? It is the unauthorized acquisition, distribution, disclosure, destruction, manipulation, or release of personal information that could result in the likelihood of harm to the individual," Burnette said. "A lot of people have the misconception that names are — if we released a set of names — that we would have a data breach. Technically, a list of names in and of itself is not (considered a breach.) It has to be something that could result in the likelihood of harm."

As part of the presentation, Burnette defined personal information as any combination of first names, last names, initials, personal mark, or unique biometric or genetic prints — along with things like social security numbers and taxpayer identification information.

As part of multiple (Kentucky Revised Statutes), the school has multiple protocols it must enact in the case of a data breach. An investigation must be conducted, and if it is determined that a breach took place, several actions are taken from there.

The commissioner of the Kentucky State Police, the auditor of public accounts, the attorney general's office, and the commissioner of the Kentucky Department of Education must all be notified of the breach within 72 hours. The initial investigation must be continued to find out if harm can be caused by the breach — with 48 hours being given to notify the aforementioned parties and the commissioner of libraries and archives if that is the case.

Within 35 days of these notices, all individuals impacted by the security breach must be notified by the school system.

Depending on how many people are impacted, these notifications will come in the form of in-person meetings, phone calls, postings online, or written notes. If the number of affected individuals is over 1,000, the school system must notify all consumer credit reporting agents on the list that's maintained by the office of the attorney general.

"We say all that, to say that we feel that we are pretty secure in the county. We take lots of steps to ensure that we are safe," Burnette said.

Clotfelter-Samokar Architect Tony Thomas was caught in traffic, so Superintendent David Gilliam stepped in to give the construction report.

While some work still needs to be done, Clark Moores Middle School renovations are nearly completed. Dugouts at Madison Central High School and Madison Southern High School are nearly completed as well, with work on the concrete roofs coming along.

According to Gilliam, the concrete roofing slowed down process on the dugouts.

"They're better, but it does take awhile," he said.

The northern Ignite Academy campus is "nearly ready." With equipment for classrooms being moved in over the last few days.

"On day one, those students who are to be at Ignite first or second period; they are to go to (Madison) Central. Then Central will direct them, they're gonna check them all off and make sure all the students that are supposed to be going are going. Everybody has to ride the bus day one to Ignite," Board member Lori Cobb explained.

Ignite Academy Southern Campus is further behind in construction. As discussed in the July school board meeting, there were parts supply issues for the HVAC system for the facility. While controlled air is in the building now, it will take some time to climatize the building before construction can be finished.

Madison Southern students who have classes at Ignite Academy will temporarily take their classes at Madison Southern as the finishing touches are placed on Ignite South.

Open houses will be held for both Ignite campuses and Clarke Moores when building and renovations are completed.

CFO Mark Woods presented the school system's monthly financial report.

As of July 31, the district ended with a reconciled balance of $61,994,739.51. Woods remarked that the balance is down sizeably from the previous years at this time, but noted that it is because of the multitude of construction projects that have went on in the district. $5,740,990.65 of the funding in the reconciled balance is tied to investments.

Woods then presented the school system's annual finance report. Fiscal Year 2022 ended on June 30. Revenue from the general fund was comprised of 47.78% local money and 51.31% state money — with the rest coming from federal money and other items.

Woods mentioned the gap between local and state funding is narrowing as there continue to be cuts in state funding.

The board approved the 2023 fiscal year motor vehicle tax rate — setting it at 55.8 per 100. This is the same it has been since 1983, as set by state statutes.

A memorandum of understanding was set with Berea Independent Schools that will allow students from Berea Independent to participate in classes at Ignite South if there is any room in classes. According to the school board, the district will be reimbursed by Berea Independent for this arrangement.

Gilliam said there are similar memorandum's with Estill County Schools and Model Laboratory Schools.

Two emergency teacher certifications were approved by the board for two science teachers. They have degrees, but did not have certifications yet. Cobb reiterated that the two teachers are qualified.

Two family service worker positions (one at Madison Southern and another at Madison Central) were created and ratified as state family resource center funding increased. They would be one year positions, based on the current funding.

Two athletic site manager positions (both getting paid a $1,500 stipend through the school athletic fund) and two assistant football coach positions ($1,077 each paid for by the football club) were created and ratified by the board.

The final reading of policies 03.11, 03.21, and 09.121 were read by the board.

A renewal with the Imagine Learning online curriculum was approved by the board at $50,905. It is an annual subscription that has been used by the board for years.

The board voted to consider adding a cyber liability insurance rider to their current EMC policy for $2,781.

One and a half truck loads of white copy paper $53,638.20 were bought from Action Business Suppliers.

Custodian positions were amended at the Ignite Academies to pay them at the rate of a head custodian, which is a $1.60 higher in pay. The board made this position because there will only be one custodian working in each Ignite Academy.

©2022 the Richmond Register (Richmond, Ky.). Distributed by Tribune Content Agency, LLC.