School systems often lack needed security controls, exposing sensitive data, CEO John A. Smith comments.