State Monitoring Checklist Cross‐Reference LCS Data Governance ON‐SITE INDICATORS Plan Dated minutes of meetings Has the data governance committee and agendas been established and roles and Established 06‐01‐15 1. responsibilities at various levels Committee Current list of roles and specified? responsibilities Copy of the adopted data Draft in progress. Has the local school board adopted a governance and use 2. Expected availability data governance and use policy? policy 10‐01‐14 Does the data governance policy Documented physical 3. Controls and Protections address physical security? security measures General provisions Data transfers Current list of controls INOW Permissions Does the data governance policy Reporting 4. address access controls and possible Employee policy with breaches sanctions? possible sanctions Data Security Agreements Email –Violations and Enforcement Procedures to ensure that Does the data governance policy 5. data are accurate, complete, Quality Controls address data quality? timely, and relevant Policies and procedures to Data transfers and Non‐ guide decisions about data Disclosure Agreements Does the data governance policy exchange and reporting 6. address data exchange and reporting? Disclosure of data via Contracts or MOAs involving email data exchange Documented methods of Has the data governance policy been distribution to include who Dissemination of policy documented and communicated in an was contacted and how 7. open an accessible way to all Data Security Training stakeholders? Professional development for all who have access to PII
State Monitoring Checklist Cross‐Reference ON‐SITE INDICATORS LCS Data Governance Plan 1. Has the data governance committee been established and roles and responsibilities at various levels specified? Dated minutes of meetings and agendas Current list of roles and responsibilities Established 06‐01‐15 Committee 2. Has the local school board adopted a data governance and use policy? Copy of the adopted data governance and use policy Draft in progress. Expected availability 10‐01‐14 3. Does the data governance policy address physical security? Documented physical security measures Controls and Protections 4. Does the data governance policy address access controls and possible sanctions? Current list of controls Employee policy with possible sanctions General provisions Data transfers INOW Permissions Reporting breaches Data Security Agreements Email –Violations and Enforcement 5. Does the data governance policy address data quality? Procedures to ensure that data are accurate, complete, timely, and relevant Quality Controls 6. Does the data governance policy address data exchange and reporting? Policies and procedures to guide decisions about data exchange and reporting Contracts or MOAs involving data exchange Data transfers and Non‐ Disclosure Agreements Disclosure of data via email 7. Has the data governance policy been documented and communicated in an open an accessible way to all stakeholders? Documented methods of distribution to include who was contacted and how Professional development for all who have access to PII Dissemination of policy Data Security Training