Inappropriate exposure of confidential student recordsControlPeriodic automated vulnerability scans of systems, networks and devices