Cybersecurity Audit Reveals Need for Improvements of Waynesville Schools

JEFFERSON CITY, Mo.-- The Missouri State Auditor is recommending improvements to the Waynesville School District's cybersecurity program after multiple problems were found in a recent audit.

The audit is the second in a series of five Cyber Aware School audits designed to examine data protection practices in schools, and includes recommendations to increase staff awareness and training for a potential cyber breach event.

In addition to recommending security and privacy awareness training for employees and users of the district's computerized systems, auditors identified a number of areas for improvement.

40 user accounts belonging to former district employees or volunteers remained active, even though the individuals were no longer with the district. Some current staff members were permitted to share user accounts and passwords without sufficient monitoring.

"The risks posed by data breaches are just too high to wait to take action, particularly when it comes to protecting our state's children," Auditor Galloway said. "My team has made recommendations to officials in Waynesville to better safeguard students' personal information, and a key starting point is increased staff training. Cybersecurity requires ongoing efforts, but school employees can be the first line of defense against attacks."

 The district also lacks a comprehensive data governance program, which could help ensure the integrity and confidentiality of personally identifiable information. Additionally, auditors recommended the district establish a process to ensure software acquired by third-party technology vendors complies with data security principles.

"Waynesville School District officials have already taken steps to address a number of the issues we identified, and those efforts will be critical in protecting students," Auditor Galloway said.

The complete audit report is available online here.

The Waynesville School District is one of five districts selected for an initial round of Cyber Aware School Audits. An audit of the Boonville School District in Cooper County was released in March.  

(edited news release)

More Stories

Don't Miss

Latest News

Video Center