SIMS - VPN Access

[Buzz]

What are your opinions about Admin Staff accessing SIMS from home using VPN, especially those members of staff who have administrator rights and can view personnel data?

My opinion is that there a few legal issues to be addressed, i.e. Data Protection for example. Consent from other members of staff that their personal information can be accessed from home. I don't know I could be over reacting, how are other schools implementing this?

[NetworkGeezer]

If these staff normally display a poor practice in relation to confidentiallity and computer security then raise your concerns with SMT.

As things stand you couldn't prevent the same people from printing out the same information and taking it home. It's not inconceivable that senior staff take staff appraisals and CVs home. Teachers also routinely take home confidential data about students.

All that VPN and other remote access technologies introduce is a greater security threat if privately owned or third party equipment is being used.

[broc]

I had similar concerns when I was asked by our SMT to open up access to SIMS.net, mainly for student assessment data & reporting.

We are in the process of drafting an 'agreement' document which outlines staff responsibilities to protect data, adhere to software licencing rules re TS etc and they are being asked to sign it before they will be granted remote access.

[bossman]

We are just implementing with terminal services on a windows 2003 R2 box at the mo. 128 bit encryption and AD authentication for certain users only (those whom we deem responsible enough) these users will be locked down tight through GPOs and also through Sims management.

I also have a contractual AUP which all staff have signed which has been enforced via Headteacher, Governors and Unions.

[Buzz]

Thank you guys, I am actually going to have a meeting with the Headteacher tomorrow regarding this issue. Bossman is it possible if you could send me a copy of your contractual AUP and hopefully adopt it as well.

Regards

[mark]

I need to draft one of those documents - anyone feel like sharing?

[fooby]

especially those members of staff who have administrator rights

:-O surely thats only you!!!

Other than that, the personnel officer can read these? I dont think many other people here can see that (Data Protection and all that)

fooby