District lacked internal controls and did not comply with requirements in multiple areas, putting public monies, sensitive computerized data, and student safety at risk