Information Security – it’s not black and white

re: Information Security – it’s not black and white

Ray Fleming — Tue, 23 Sep 2008 00:51:17 GMT

sprince - you're spot on. That would mean anything coming out of SIMS/CMIS/Integris needs stamping (get out your rubber stamps folks!)

It seems unlikely that an IEP can be taken out of school, unless it is "securely transported" - probably not slung in a backpack with a pile of other stuff.

I think I'm going to need a bigger diagram!

Keep the thoughts coming

Ray

re: Information Security – it’s not black and white

sprince — Mon, 22 Sep 2008 21:29:31 GMT

I would say that according to the labelling guidance, a printed report without its Impact Level and shredding instructions in the header and footer would be in the red zone.

I'm not sure where one stands on taking a printed document such as an IEP out of school. It suggests that when they are in school they need to be locked away.

I also wonder how we are fixed for posting confidential documents, e.g. to the parents.

re: Information Security – it’s not black and white

Ray Fleming — Fri, 19 Sep 2008 17:41:37 GMT

Have updated the diagram with John's input

re: Information Security – it’s not black and white

Ray Fleming — Fri, 19 Sep 2008 01:04:43 GMT

Will do John - all good stuff to add.

And that's reminded me of another one - hosting school data on a service outside of the EU! (eg Google Apps, Hotmail etc)

Both will probably have to wait until the weekend, when I can get to the original file.

Any other thoughts from anybody?

Ray

re: Information Security – it’s not black and white

John_Howarth — Fri, 19 Sep 2008 00:22:55 GMT

Hi Ray,

Perhaps you could add the following to the red section?

Sending unencrypted MIS data to Learning Platform solutions hosted outside of the school's network.

Sending MIS data to Learning Platform solutions hosted outside of the school's network without using SSL security.

Emailing unencrypted Special Needs (or other sensitive) information.

Thanks,

John.