The state's education commissioner said districts are not equipped to adhere to basic cybersecurity standards.