Remote access and data protection

[number34]

We are considering remote access to SIMS again and I would like to know what those of you who allow it do about Data Protection.

[forrager]

Have you considered setting up so staff can access SIMS once they are connected via VPN (or direct access) using a RDWeb connection. That way the only data that leaves the server is the keystrokes and video.

[tombry]

we only allow it via the VPN and RDP, I've tried running SIMS on a teacher's laptop from my house and it doesn't work well enough (under our systems).

[localzuk]

We have it running only via Remote Desktop (RDWeb via a RD Gateway) here. I don't see a need for a specific VPN, as the traffic is SSL encrypted already.

[number34]

Thanks for both answers so far. We are considering RDP and/or TASC Connect. We are not worried about secure connections but are worried about Data protection when staff are viewing sensitive or personal data off site.

[localzuk]

You need to ensure your data protection policy is robust and covers the use of personal data by staff in any circumstance (and not location specific).

 

RDS will prevent staff from being able to save data at home to their machine (if set up correctly), but the technological fixes are only secondary to policy and its enforcement.

 

Do you issue laptops to staff? If so, you could ensure they are encrypted and only allow remote access via those devices, so you're sort of double-covered.