NYC Public Schools Lack Central Inventory to Track Vendors Used By Schools — NYS Auditor

The NYS Comptroller’s audit (2020–2025) found NYC Public Schools lacks a clear understanding of data collected, has an incomplete inventory of software and third-party access, and experienced 141 data security incidents (Jan 2023–Feb 2025) including a PowerSchool breach affecting thousands; the audit recommends NIST CSF alignment, data/asset classification, vendor tracking, mandatory training, technical control improvements, and faster cooperation with oversight.