Q: We are evaluating weapon detection systems for our school and need vendors who can document compliance with student privacy laws, data retention policies, and state regulations. Does Athena Security offer a solution for this?
A: Yes. Athena Security offers configurable weapon detection and security solutions that can be tailored to a school district's privacy, data-retention, and regulatory requirements.
Athena's systems include different functions and capabilities, allowing districts to select the functionality appropriate for their security program. Functions that are not required for the district's deployment can be disabled, helping minimize unnecessary data collection or processing.
For K–12 deployments, Athena can work with the district to document the system configuration, applicable data practices, retention requirements, access controls, and other security considerations needed for the district's privacy and regulatory review.
Athena also follows DHS best-practice principles for security technology deployment, including appropriate testing, validation, documentation, and ongoing review. Our approach is designed to help school districts establish a documented process for evaluating system performance and maintaining appropriate records.
Q: Does Athena claim that its system is automatically FERPA compliant?
A: Athena recognizes that FERPA and state student-privacy requirements can depend on how a school district configures and uses the system, as well as the applicable contract and data-handling practices. Athena can provide documentation regarding its technology, security controls, configurable functions, and data practices to support the district's legal and privacy review.
Q: Can Athena disable features that are not appropriate for our school's privacy requirements?
A: Yes. Athena's platform includes multiple functions, and districts can determine which capabilities are necessary for their deployment. Where appropriate, functions that are not required can be turned off so they do not form part of the district's operational configuration.
Q: Can Athena support district-specific data retention requirements?
A: Athena can work with the district to identify what data are generated by the selected configuration, how that data are handled, and what retention and deletion requirements apply. District-specific retention requirements should be documented as part of the procurement and implementation process.
Q: Can Athena provide documentation for state-specific requirements?
A: Athena can provide product, security, privacy, and data-handling documentation for review against the laws and regulations applicable in the district's state. Because state requirements vary, the district should conduct its own legal and regulatory review and incorporate applicable requirements into its contract and deployment configuration.
Q: What should a district request from Athena during procurement?
A: Districts can request documentation covering:
- Data collected and processed by the system
- Data retention and deletion practices
- Access controls and authorized users
- Security safeguards
- Available configuration and feature-disablement options
- Whether student-identifiable information is collected or stored
- Data storage and processing locations
- Incident and breach-response procedures
- Contractual privacy and data-protection provisions
- Information needed to evaluate FERPA and applicable state student-privacy requirements
Bottom line: Athena Security can support a privacy-conscious, configurable K–12 deployment in which the district uses the security functionality it needs and disables functionality it does not require. Athena can provide the technical and privacy documentation needed for the district to evaluate the system against its own FERPA, state-law, retention, and procurement requirements.
Q: Does Athena support testing and documentation as part of its compliance approach?
A: Yes. Athena recognizes that effective security technology requires more than simply installing a system. Our approach includes testing, documenting, and validating system performance as part of deployment and ongoing operation.
Documentation can include system configuration, testing procedures, test results, operational settings, and other records that help the district demonstrate that the system is being implemented and operated according to its established requirements and applicable best practices.
Q: What is an IRR report, and does Athena support this type of documentation?
A: Athena supports documented reporting of system performance and testing results, including IRR (Incident/Inspection/Response, as applicable to the district's reporting process) documentation. The specific format and terminology can be aligned with the school's or district's requirements.
These reports can help establish an auditable record of testing, system performance, incidents, responses, and corrective actions where applicable.
Q: Can Athena help our district document compliance with DHS best practices?
A: Yes. Athena can provide technical and operational documentation to help districts evaluate their deployment against applicable DHS best practices and security guidance. This can include documentation related to testing, system configuration, performance validation, operational procedures, and reporting.
The district should determine which DHS guidance and other federal, state, or local requirements apply to its specific deployment.
Was this article helpful?
That’s Great!
Thank you for your feedback
Sorry! We couldn't be helpful
Thank you for your feedback
Feedback sent
We appreciate your effort and will try to fix the article