Data Loaded from Mystudent into PowerSchool | Status |
Student Accounts | Done |
Staff Accounts | Done |
Guardian Accounts | Done |
Courses | Done |
Student Enrollments | Done |
Immunizations | Done |
Program Enrollments | Done |
Transcripts | Done July 31 |
Incidents - setup complete | In Progress |
Incident Data (Historical Tracker Info) | October 1 for historical incidents (this info still in MyStudent) |
Test Scores | August 26 |
Weber Online Flex | No ETA; School created and ready 8/8. Working on 3rd party connections |
WIC Online | No ETA; School created and ready 8/8. Working on 3rd party connections |
Product | Status | Comment |
Import Lunch Balances into Titan | DONE | |
Lunch Balances in InTouch | DONE | 8/18/2023 |
Lunch Balances in PowerSchool | DONE | ETA 9/15/2023 |
LunchCode share w Fee Waiver Pgm Titan->PowerSchool | DONE | ETA 9/15/2023 |
Lunch Deposits sync from InTouch to Titan | DONE | 8/14/2023 |
Icons in PowerSchool: SPED, 504, ELL, etc. | DONE | 8/9/2023 |
WeberOnline Flex | In Progress | |
WIC Online | In Progress |
Product | Type | Status | Comment |
AcyMailer | SFTP | DONE | |
Canvas | Plugin | DONE | |
Canvas (WOL and WIC Online) | Custom App | In Progress | In-house app |
Clever | Custom Plugin | DONE | Done. Missing a few staff members still. Marking as Done. |
Destiny | SFTP | In Progress (Jill) | Assigned 8/22/2023 |
EasyBridge | Plugin | In Progress | Need to Test |
EdPlan | Custom Plugin | In Progress (Jill) | Need to Test |
HMH | Plugin | In Progress | Need to Test |
Identity Manager | Custom App | In Progress | Currently a nightly manual process; Working on automation |
IncidentIQ | Plugin | DONE | |
InTouch | Plugins | DONE | |
Learn Platform | Plugin | In Progress (Jill) | Assigned 8/22/2023 |
Level Learning | Plugin | In Progress (Jill) | Assigned 8/22/2023 |
Panorama | Plugin | In Progress | Plugin is done. Need to create 2 additional file exports |
Titan | Plugin & SFTP | DONE | 8/10/2023 |
Transfinder | Custom Plugin | DONE | Completed 8/10/2023; Testing done 8/15/2023 |
USIIS | SFTP | In Progress (Jill) | |
Utah Studies | SFTP | In Progress (Jill) | Assigned 8/22/2023 |
UTREx - State Reporting | Plugin | DONE | Cleaning up Errors in Data |
Each year a booklet is published featuring the retiring employees for the year. The booklets are made available to faculty and staff at schools, and every retiring employee will receive a copy at the retirement banquet in the spring.
If you’re retiring this year, we want to hear from you! Share some fond memories of your career and tell us about the plans you are making for your retirement years.
Retirement Yearbook Submissions
Retirees will continue to receive the retirement yearbook for five years at their mailing address on file with the school district.
# | Name | Size | Downloaded |
---|---|---|---|
1 | ![]() | 10.38 MB | 230 times |
2 | ![]() | 8.19 MB | 610 times |
3 | ![]() | 10.31 MB | 688 times |
4 | ![]() | 10.12 MB | 595 times |
5 | ![]() | 8.82 MB | 524 times |
6 | ![]() | 12.59 MB | 908 times |
We are excited to announce our participation in Dell’s Education Purchase Program (EPP)!
EPP is a discount program that allows all employees, students, and friends to receive member
only pricing on all personal purchases from Dell. Dell has created a dedicated website that we
can shop 24/7. www.Dell.com/mpp/WeberSchools. Program discounts are automatically applied
at checkout.
Have questions, need a technology consult, or custom quote?
Email me or Call my team at 1-888-693-9448.
**Available to employees, staff, students, parents, and friends & family**
(For all: Govt., K12 & Higher Edu., Medical, Community Services, and Non-Profits.)
As of October 1, 2022, retiree WSD accounts will be terminated. This includes Employee Online.
You will no longer be able to access information housed in Employee Online (paycheck stubs, W-2’s,etc.) If you need to access information from Employee Online after October 1, 2022, contact Human Resources at 801-476-7886.
If you are not actively working for WSD, your WSD email account and Google Drive will no longer be available. Please provide the district with a personal email address by September 30, 2022, in order continue receiving communication regarding your health insurance benefits.
While you may be leaving, your files stay here, but there is a way to take them with you! You can download or transfer your emails, files, notes, and more with Google Takeout. Follow along with Ryan in the video below:
Protection of Pupil Rights Amendment (PPRA) and UT FERPA Policy
Policy Statement
Weber School District shall ensure that parental involvement occurs in cases where information collected from a student would generally raise privacy concerns in accordance with 20 USC 1232h and UCA 53E-9-203.
Procedures
Weber School District shall provide notice and an opportunity to a parent to inspect any instructional content that is provided to a student, regardless of its format, including printed or representational materials, audio-visual materials, and materials in electronic or digital formats (such as materials accessible through the Internet) used as part of the educational curriculum for the student.
Weber School District shall provide notification to parents and the opportunity to opt out of nonemergency, invasive physical examination that is:
Weber School District shall provide notice of and an opportunity to opt out of activities involving collection, disclosure, or use of personal information collected from students for marketing or to sell or otherwise distribute the information to others.
Weber School District shall provide notification to parents of this policy as follows:
Weber School District shall provide training for teachers and administrators on the implementation of this policy.
If a school employee, agent, or school resource officer believes a student is at-risk of attempting suicide, physical self-harm, or harming others, the school employee, agent, or school resource officer may intervene and ask a student questions regarding the student's suicidal thoughts, physically self-harming behavior, or thoughts of harming others for the purposes of:
The rights to notification and opt out shall transfer to the student when the student turns 18 years old or is an emancipated minor.
update 9/13/2021
Necessary student data means data required by state statute or federal law to conduct the regular activities of the school.
We may only collect optional student data with written consent from the student’s parent or from a student who has turned 18.
Certain sensitive information on students collected via a psychological or psychiatric examination, test, or treatment, or any survey, analysis, or evaluation will only be collected with parental consent. You will receive a separate consent form in these cases. See our Protection of Pupil Rights Act (PPRA) notice for more information.
Except as provided above, the following topics are prohibited topics from a school official to a student.
We will not collect a student’s social security number or criminal record, except as required by Utah Code Section 80-6-103.
We will only share student data in accordance with the Family Educational Rights and Privacy Act (FERPA), which generally requires written parental consent before sharing student data. FERPA includes several exceptions to this rule, where we may share student data without parental consent. For more information on third parties receiving student information from us, see our Metadata Dictionary.
Student data will be shared with the Utah State Board of Education via the Utah Transcript and Records Exchange (UTREx). For more information about UTREx and how it is used, please visit the Utah State Board of Education’s Information Technology website.
The collection, use, and sharing of student data has both benefits and risks. Parents and students should learn about these benefits and risks and make choices regarding student data accordingly. Parents are given the following choices regarding student data:
Your local school district or charter school |
Tanya Miller |
The Utah State Board of Education |
Report your concern with the USBE hotline |
The US Department of Education |
Report your concern here |
In accordance with Board Rule R277-487-3(14), we have adopted a cybersecurity framework called the CIS Controls.
updated 4/24/2024
The Family Educational Rights and Privacy Act (FERPA) is a federal law that protects the privacy of student education records. Weber School District, with certain exceptions, must obtain your written consent before disclosing any personally identifiable information from your child's education records, except for certain designated "directory information." Directory information may be disclosed without your consent unless you have notified Weber School District otherwise.
The primary purpose of directory information is to allow Weber School District to include information from your child’s education records in certain school publications. Examples include:
• A playbill showing your student’s role in a drama production;
• The annual yearbook;
• Honor roll or other recognition lists;
• Graduation programs, and
• Sports activity sheets, such as for wrestling, showing the weight and height of team members.
Directory information, which is information that is generally not considered harmful or an invasion of privacy if released, can also be disclosed to outside organizations without a parent’s prior written consent.
Outside organizations include, but are not limited to, companies that manufacture class rings or publish yearbooks.
In accordance with two federal laws, the Elementary and Secondary Education Act of 1965 (ESEA) and Section 10 U.S.C. § 503(c), Weber School District, as a recipient of ESEA assistance, is required to provide military recruiters and institutions of higher education with student names, addresses, and telephone listings upon request. Parents may opt out of this disclosure by notifying Weber School District in writing.
To opt out of having Weber School District disclose directory information from your child's education records, please submit a written notification to the district by the last day of September.
Weber School District has designated the following information as directory information:
(updated 11/07/2023)
Model Notification of Rights under FERPA for Schools
The Family Educational Rights and Privacy Act (FERPA) affords parents and students who are 18 years of age or older ("eligible students") certain rights with respect to the student's education records. These rights are:
Parents or eligible students who wish to inspect their child’s or their education records should submit to the school principal [or appropriate school official] a written request that identifies the records they wish to inspect. The school official will make arrangements for access and notify the parent or eligible student of the time and place where the records may be inspected.
Parents or eligible students who wish to ask the [School] to amend their child’s or their education record should write the school principal [or appropriate school official], clearly identify the part of the record they want changed, and specify why it should be changed. If the school decides not to amend the record as requested by the parent or eligible student, the school will notify the parent or eligible student of the decision and of their right to a hearing regarding the request for amendment. Additional information regarding the hearing procedures will be provided to the parent or eligible student when notified of the right to a hearing.
One exception, which permits disclosure without consent, is disclosure to school officials with legitimate educational interests. The criteria for determining who constitutes a school official and what constitutes a legitimate educational interest must be set forth in the school’s or school district’s annual notification for FERPA rights. A school official typically includes a person employed by the school or school district as an administrator, supervisor, instructor, or support staff member (including health or medical staff and law enforcement unit personnel) or a person serving on the school board. A school official also may include a volunteer, contractor, or consultant who, while not employed by the school, performs an institutional service or function for which the school would otherwise use its own employees and who is under the direct control of the school with respect to the use and maintenance of PII from education records, such as an attorney, auditor, medical consultant, or therapist; a parent or student volunteering to serve on an official committee, such as a disciplinary or grievance committee; or a parent, student, or other volunteer assisting another school official in performing his or her tasks. A school official typically has a legitimate educational interest if the official needs to review an education record in order to fulfill his or her professional responsibility.
[Optional] Upon request, the school discloses education records without consent to officials of another school or school district in which a student seeks or intends to enroll, or is already enrolled if the disclosure is for purposes of the student’s enrollment or transfer. [NOTE: FERPA requires a school or school district to make a reasonable attempt to notify the parent or student of the records request unless it states in its annual notification that it intends to forward records on request or the disclosure is initiated by the parent or eligible student.]
Student Privacy Policy Office
U.S. Department of Education
400 Maryland Avenue, SW
Washington, DC 20202
[NOTE: In addition, a school may want to include its directory information public notice, as required by § 99.37 of the regulations, with its annual notification of rights under FERPA.]
[Optional] See the list below of the disclosures that elementary and secondary schools may make without consent.
FERPA permits the disclosure of PII from students’ education records, without consent of the parent or eligible student, if the disclosure meets certain conditions found in § 99.31 of the FERPA regulations. Except for disclosures to school officials, disclosures related to some judicial orders or lawfully issued subpoenas, disclosures of directory information, and disclosures to the parent or eligible student, § 99.32 of the FERPA regulations requires the school to record the disclosure. Parents and eligible students have a right to inspect and review the record of disclosures. A school may disclose PII from the education records of a student without obtaining prior written consent of the parents or the eligible student –
We realize that this puts some undue stress on those of you that have used blogs regularly. Rest assured, we have trained EdTech coaches in your buildings on viable replacements for your blogs and they are ready and willing to help you migrate content over to those options. Please understand that after March 15th, whatever content you have on those blogs will no longer be available, so please begin migrating content as soon as possible.
We anticipate that some of you might be wondering if blogs will be coming back at some point. The answer to that is no. Again, we have some viable alternatives that we think will take blogs’ place and will work better. For example, some teachers used blogs as a way to have an online calendar with daily updates. Both Canvas and Google Classroom have this ability built in and is more streamlined to send out announcement to students and parents--again, great alternatives to blogs.
Additionally, we encourage you to please subscribe to our new Training Channel on YouTube. We have uploaded a couple applicable videos that can help as you migrate your content and we will be uploading training videos frequently going forward.
Weber School District (hereafter referred to as the LEA) takes its responsibility to safeguard student data very seriously. This governance plan incorporates the following Generally Accepted Information Principles (GAIP):
The LEA acknowledges the risks and liabilities associated with maintaining student data and other education-related data, and will implement reasonable data industry best practices to mitigate these risks.
In accordance with R277-487, the LEA shall do the following:
The LEA acknowledges the need to identify parties who are ultimately responsible and accountable for data and content assets. These individuals and their responsibilities are as follows:
The LEA acknowledges that training and supporting educators and staff on federal and state data privacy laws is essential for legal compliance.
In accordance with the risk management priorities of the LEA, the LEA will conduct an audit of:
There is a risk of redisclosure whenever student data are shared. The LEA shall follow appropriate controls to mitigate the risk of redisclosure and to ensure compliance with federal and state law.
The LEA acknowledges the risk of using student data to mistreat students, as this data can follow them year after year. To mitigate this risk, the LEA will review all requests for records expungement from parents and make a determination based on the following procedure.
The following records may not be expunged: grades, transcripts, a record of the student’s enrollment, and assessment information.
The procedure for expungement shall match the record amendment procedure found in 34 CFR 99, Subpart C of FERPA.
The LEA will implement and maintain CIS v8 and NIST SP 800-122-compliant data security controls to protect personally identifiable information (PII). In the event of a data breach or inadvertent disclosure of PII, the LEA staff will follow the LEA's incident response plan.
The LEA recognizes the importance of transparency and will post this policy on the LEA website.
(updated 11/7/2023)
Weber School District is committed to a policy of protecting the rights and privacy of individuals (includes students, staff and others) in accordance with the Student Data Protection Act (HB 358 Utah 2017; SB 102 Utah 2017). The district needs to process certain information about its staff, students, and other individuals it has dealings with for administrative purposes. To comply with the law, information about individuals must be collected and used fairly, stored safely and securely, and not disclosed to any third party unlawfully.
Weber School District has adopted the following principles to govern its use, collection, storage, transmittal, and deletion of all student data, except as specifically provided by this policy or as required by applicable laws.
7.1 Current Compliance Assessment
Weber School District shall establish a schedule for and implement a data protection compliance audit for all locations. Weber School District, in cooperation with individual locations, shall devise a plan and schedule for correcting any identified deficiencies within a fixed, reasonable time.
7.2 Annual Data Protection Audit
Each location shall review annually its data collection, processing, and security practices. This annual review shall consist of at least the following:
This Policy shall be available to employees through the Human Resources Department and shall be made available to non-employees through posting to http://wsd.net.
This Policy is adopted as of July 1, 2017. Weber School District, in cooperation with the schools, will develop a timeline and program for implementing this Policy. This implementation program will include the resolution of any conflicts between this Policy and other existing policies. (HB 358 53A-1-1409:568)
This Policy may be revised at any time. Notice of significant revisions shall be provided to employees through the Human Resources Department and to others through the Weber School District website, located at http://wsd.net.
Adult Student: Student’s 18 years old or older, emancipated students, or students qualified under the McKinney-Vento Homeless Education Assistance
Aggregate Data: Totalled and reported at the group, school, district, region, or state level with at least 10 individuals at the level
Data Authorization: Written authorization to collect or share student’s data
Data Governance Plan: Comprehensive plan for managing education data
Education Entity: Weber School District and its individual schools
Expunge: Seal or permanently delete data
Instructional Material: Instructional content that is provided to a student, regardless of its format, including printed or representational materials, audio-visual materials, and materials in electronic or digital formats (such as materials accessible through the Internet). The term does not include academic tests or academic assessments.
Invasive Physical Examination: Any medical examination that involves the exposure of private body parts, or any act during such examination that includes incision, insertion, or injection into the body, but does not include a hearing, vision, or scoliosis screening.
Legal Guardian: Parent, Legal Guardian, or Adult Student
Necessary Student Data: Data required by the statute or federal law to conduct the regular activities (HB 358 53A-1-1402:314)
Optional Student Data: Data not included in the Necessary category (HB 358 53A-1-1402:346)
Personally Identifiable Information (PII): Information that identifies a student (HB 358 53A-1-1402:359)
Survey: An evaluation
The purpose of this policy is to ensure the secure use and handling of all district data, computer systems and computer equipment by District students, patrons, and employees.
It is the policy of the Weber School District to support secure network systems in the district, including security for all personally identifiable information that is stored on paper or stored digitally on district-maintained computers and networks. This policy supports efforts to mitigate threats that may cause harm to the district, its students, or its employees.
The district will ensure reasonable efforts will be made to maintain network security. Data loss can be caused by human error, hardware malfunction, natural disaster, security breach, etc., and may not be preventable.
All persons who are granted access to the district network and other technology resources are expected to be careful and aware of suspicious communications and unauthorized use of district devices and the network. When an employee or other user becomes aware of suspicious activity, he/she is to immediately contact the district’s Information Security Officer with the relevant information.
This policy and procedure also covers third party vendors/contractors that contain or have access to Weber School District critically sensitive data. All third party entities will be required to sign the Restriction on Use of Confidential Information Agreement before accessing our systems or receiving information.
It is the policy of Weber School District to fully conform with all federal and state privacy and data governance laws. Including the Family Educational Rights and privacy Act, 20 U.S. Code §1232g and 34 CFR Part 99 (hereinafter “FERPA”), the Government Records and Management Act U.C.A. §62G-2 (hereinafter “GRAMA”), U.C.A. §53A-1-1401 et seq and Utah Administrative Code R277-487.
Professional development for staff and students regarding the importance of network security and best practices are included in the procedures. The procedures associated with this policy are consistent with guidelines provided by cyber security professionals worldwide and in accordance with Utah Education Network and the Utah State Office of Education. Weber School District supports the development, implementation and ongoing improvements for a robust security system of hardware and software that is designed to protect Weber School District’s data, users, and electronic assets.
3.1.1. Access: Directly or indirectly use, attempt to use, instruct, communicate with, cause input to, cause output from, or otherwise make use of any resources of a computer, computer system, computer network, or any means of communication with any of them.
3.1.2. Authorization: Having the express or implied consent or permission of the owner, or of the person authorized by the owner to give consent or permission to access a computer, computer system, or computer network in a manner not exceeding the consent or permission.
3.1.3. Computer: Any electronic device or communication facility that stores, retrieves, processes, or transmits data.
3.1.4. Computer system: A set of related, connected or unconnected, devices, software, or other related computer equipment.
3.1.5. Computer network: The interconnection of communication or telecommunication lines between: computers; or computers and remote terminals; or the interconnection by wireless technology between: computers; or computers and remote terminals.
3.1.6. Computer property: Includes electronic impulses, electronically produced data, information, financial instruments, software, or programs, in either machine or human readable form, any other tangible or intangible item relating to a computer, computer system, computer network, and copies of any of them.
3.1.7. Confidential: Data, text, or computer property that is protected by a security system that clearly evidences that the owner or custodian intends that it not be available to others without the owner's or custodian's permission.
3.1.8. Encryption or encrypted data – The most effective way to achieve data security. To read an encrypted file, you must have access to a secret key or password that enables you to decrypt it.
3.1.9. Personally Identifiable Information (PII) - Any data that could potentially identify a specific individual. Any information that can be used to distinguish one person from another and can be used for de-anonymizing anonymous data can be considered protected data
3.1.10. Security system: A computer, computer system, network, or computer property that has some form of access control technology implemented, such as encryption, password protection, other forced authentication, or access control designed to keep out unauthorized persons.
3.1.11. Sensitive data - Data that contains personally identifiable information.
3.1.12. System level – Access to the system that is considered full administrative access. Includes operating system access and hosted application access.
3.2.1. Weber School District shall appoint, in writing, an IT Security Group (ISG) responsible for overseeing District-wide IT security with duties that include development of District policies and adherence to the standards defined in this document.
3.3.1. Weber School District, led by the ISG, shall ensure that all District employees having access to sensitive information undergo annual IT security training which emphasizes their personal responsibility for protecting student and employee information. - Training resources will be provided to all District employees.
3.4.1. Computer Security
3.4.1.1. Weber School District shall ensure that any user’s computer must not be left unattended and unlocked, especially when logged into sensitive systems or data including student or employee information. Automatic log off, locks and password screen savers should be used to enforce this requirement.
3.4.1.2. Weber School District shall ensure that all equipment that contains sensitive information will be secured to deter theft.
3.4.2. Server/Network Room Security
3.4.2.1. Weber School District shall ensure that server rooms and telecommunication rooms/closets are protected by appropriate access control which segregates and restricts access from general school or District office areas. Access control shall be enforced using either keys, electronic card readers, or similar method with only those IT or other staff members having access necessary to perform their job functions are allowed unescorted access.
3.4.2.2. Telecommunication rooms/closets may only remain unlocked or unsecured when because of building design it is impossible to do otherwise or due to environmental problems that require the door to be opened.
3.4.3. Contractor access
3.4.3.1. Before any contractor is allowed access to any computer system, server room, or telecommunication room the contractor will need to present a company issued identification card, and his/her access will need to be confirmed directly by the authorized employee who issued the service request or by Weber School District’s Technology Department.
3.5.1. Network perimeter controls will be implemented to regulate traffic moving between trusted internal (District) resources and external, untrusted (Internet) entities. All network transmission of sensitive data should enforce encryption where technologically feasible.
3.5.2. Network Segmentation
3.5.2.1. Weber School District shall ensure that all untrusted and public access computer networks are separated from main district computer networks and utilize security policies to ensure the integrity of those computer networks.
3.5.2.2. Weber School District will utilize industry standards and current best practices to segment internal computer networks based on the data they contain. This will be done to prevent unauthorized users from accessing services unrelated to their job duties and minimize potential damage from other compromised systems.
3.5.3. Wireless Networks
3.5.3.1. No wireless access point shall be installed on Weber School District’s computer network that does not conform with current network standards as defined by the Network Manager. Any exceptions to this must be approved directly in writing by the Information Security Group.
3.5.3.2. Weber School District shall scan for and remove or disable any rogue wireless devices on a regular basis.
3.5.3.3. All wireless access networks shall conform to current best practices and shall utilize at minimal WPA encryption for any connections. Open access networks are not permitted, except on a temporary basis for events when deemed necessary.
3.5.4. Remote Access
3.5.4.1. Weber School District shall ensure that any remote access with connectivity to the District’s internal network is achieved using the District’s Palo Alto Global VPN service that is protected by multiple factor authentication systems. Any exception to this policy must be due to a service provider’s technical requirements and must be approved by the Information Security Officer.
3.6.1. System and application access will be granted based upon the least amount of access to data and programs required by the user in accordance with a business need-to-have requirement.
3.6.2. Authentication
3.6.2.1. Weber School District shall enforce strong password management for employees, students, and contractors.
3.6.2.2. Password Creation
3.6.2.2.1. All server system-level passwords must conform to the Password Construction Guidelines posted on the Weber School District Technology Website.
3.6.2.3. Password Protection
3.6.2.3.1. Passwords must not be shared with anyone. All passwords are to be treated as sensitive, confidential information.
3.6.2.3.2. Passwords must not be inserted into email messages or other forms of electronic communication.
3.6.2.3.3. Passwords must not be revealed over the phone to anyone.
3.6.2.3.4. Do not reveal a password on questionnaires or security forms.
3.6.2.3.5. Do not hint at the format of a password (for example, "my family name").
3.6.2.3.6. Any user suspecting that his/her password may have been compromised must report the incident and change all passwords.
3.6.2. Authorization
3.6.2.1. Weber School District shall ensure that user access shall be limited to only those specific access requirements necessary to perform their jobs. Where possible, segregation of duties will be utilized to control authorization access.
3.6.2.2. Weber School District shall ensure that user access should be granted and/or terminated upon timely receipt, and management’s approval, of a documented access request/termination.
3.6.3. Accounting
3.6.3.1. Weber School District shall ensure that audit and log files are maintained for at least ninety days for all critical security-relevant events such as: invalid logon attempts, changes to the security policy/ configuration, and failed attempts to access objects by unauthorized users, etc.
3.6.4. Administrative Access Controls
3.6.4.1. Weber School District shall limit IT administrator privileges (operating system, database, and applications) to the minimum number of staff required to perform these sensitive duties.
3.7.1. Monitoring and responding to IT related incidents will be designed to provide early notification of events and rapid response and recovery from internal or external network or system attacks.
3.8.1. To ensure continuous critical IT services, IT will develop a business continuity/disaster recovery plan appropriate for the size and complexity of District IT operations.
3.8.2. Weber School District shall develop and deploy a district-wide business continuity plan which should include as a minimum:
3.9.1. Server and workstation protection software will be deployed to identify and eradicate malicious software attacks such as viruses, spyware, and malware.
3.9.2. Weber School District shall install, distribute, and maintain spyware and virus protection software on all district-owned equipment, i.e. servers, workstations, and laptops.
3.9.3. Weber School District shall ensure that malicious software protection will include frequent update downloads (minimum weekly), frequent scanning (minimum weekly), and that malicious software protection is in active state (real time) on all operating servers/workstations.
3.9.4. Weber School District shall ensure that all security-relevant software patches (workstations and servers) are applied within thirty days and critical patches shall be applied as soon as possible.
3.9.5. All computers must use the District approved anti-virus solution.
3.9.6. Any exceptions to section 3.9 must be approved by the Information Security Officer.
3.10.1. In accordance with Federal and State Law, Weber School District shall filter internet traffic for content defined in law that is deemed harmful to minors.
3.10.2. Weber School District acknowledges that technology based filters are not always effective at eliminating harmful content and due to this, Weber School District uses a combination of technological means and supervisory means to protect students from harmful online content.
3.10.3. In the event that students take devices home, Weber School District will provide a technology based filtering solution for those devices. However, the District will rely on parents to provide the supervision necessary to fully protect students from accessing harmful online content.
3.10.4. Students shall be supervised when accessing the internet and using district owned devices on school property.
3.11.1. Weber School District considers the protection of the data it collects on students, employees and their families to be of the utmost importance.
3.11.2. Weber School District protects student data in compliance with the Family Educational Rights and privacy Act, 20 U.S. Code §1232g and 34 CFR Part 99 ( “FERPA”), the Government Records and Management Act U.C.A. §62G-2 ( “GRAMA”), U.C.A. §53A-1-1401 et seq, 15 U.S. Code §§ 6501–6506 (“COPPA”) and Utah Administrative Code R277-487 (“Student Data Protection Act”).
3.11.3. Weber School District shall ensure that employee records access shall be limited to only those individuals who have specific access requirements necessary to perform their jobs. Where possible, segregation of duties will be utilized to control authorization access.
3.12.1. Weber School District shall perform routine security and privacy audits in congruence with the District’s Information Security Audit Plan.
3.12.2. District personnel shall develop remediation plans to address identified lapses that conforms with the District’s Information Security Remediation Plan Template.
3.13.1 Employee Disciplinary Actions shall be in accordance with applicable laws, regulations and District policies. Any employee found to be in violation may be subject to disciplinary action up to and including termination of employment with the Weber School District.