District did not comply with important requirements and standards, putting public monies and sensitive information at increased risk of errors and fraud and potentially risking student safety