Please add Multi-Factor Authentication (MFA) as a required control for this administrative tool. The platform receives and transmits identifiable student data through its regular OneRoster sync, including student full name, school, and school-issued email address. Under the February 2026 Statewide Data Classification and Handling Policy, data that is identifiable and received, transmitted, or stored by a State system requires Restricted-level safeguards, and the policy’s Restricted in-transit access controls specifically include enforced MFA and device posture checks. Based on that requirement, MFA should be mandatory for all privileged and administrative access to this tool. https://it.nc.gov/documents/statewide-policies/statewide-data-classification-handling-policy/open