FILE: EFC
BUSINESS CONTINUITY AND TECHNOLOGY DISASTER RECOVERY
The Assumption Parish School Board recognizes the importance of maintaining and protecting computer hardware and software, including necessary equipment and supplies to maintain computer operations in the event of a disaster. The School Board shall authorize the Superintendent and/or his/her designee to maintain appropriate regulations and procedures for the proper usage of School Board owned or leased computer equipment and the protection of electronic media, applications, and stored user data.
Such regulations and procedures shall assure that the following are addressed:
Device patching, anti-virus software, data identification, Business Impact Analysis (BIA) for core functions, backup and restoration planning and testing.
A Business Continuity and Technology Disaster Recovery Plan shall be created that clearly establishes actions to be taken before, during, and after an occurrence, undesirable event, or disaster. The Plan shall be updated on a continuing basis and presented to the School Board annually.
CYBERSECURITY TRAINING
The School Board shall identify employees or School Board members who have access to the School Board's information technology assets and require those employees and School Board members to complete cybersecurity training. Each School Board member or employee with access to the School Board’s information technology assets shall complete this training within the first thirty (30) days of initial service or employment with the agency.
The Superintendent shall verify and report to the Department of State Civil Service on the completion of cybersecurity training by employees. The Superintendent shall periodically require an internal review to ensure compliance.
The School Board shall require any contractor who has access to School Board information technology assets to complete cybersecurity training during the term of the contract and during any renewal period.
Completion of cybersecurity shall be included in the terms of a contract awarded by a state or local government agency to a contractor who has access to its information technology assets.
The person who oversees contract management for the School Board shall report each such contractor's completion to the Superintendent and periodically review agency contracts to ensure compliance. The Superintendent shall verify and report to the Department of State Civil Service on the completion of cybersecurity training by each such contractor.
New policy: July 7, 2021
Ref: La. Rev. Stat. Ann. §§17:81, 42:1267
Board minutes, 7-7-21
Assumption Parish School Board