Flat networks and DPA when accessing MIS

[Tiger]

Disease: "As the OP I can confirm that Grumbledook is correct I only want to know what data you allow the teachers to see i.e address etc, I have a split network and require no advice on the pro's and cons of split networks. "

 

OK to make it easy let me break up the issue into two parts.

 

Part-1: What data? Common sense says what ever rules you have for information in paper form should also apply to electronic form. But should it? Becuase the problem is that information in electronic form is much more easily and covertly dublicated/transferred in mass than paper form. Therefore one needs to factor this in.

 

Part-2: Split Networks? Good, then you have at least blocked access to MIS db from insecure area (ie curriculum network). Hence you narrowed the risks identified in Part-1.

 

Do you see that the two parts in the above are clearly inter dependant?

[Disease]

**Holds head in hands and begins to cry**

[AnnDroyd]

We give all teachers access to view most information about students, but not make any changes.

 

They also have VERY restricted access to staff info. Basically names, staff codes and timetables.

 

Obviously there's a security risk of making any data available in the classrooms but this is required.

 

Got to keep things in perspectice here... most of SIMS is just names and addresses. Hardly the kind of stuff requiring military level security!

Edited May 2, 2008 by AnnDroyd

[Tiger]

jwood: "Got to keep things in perspectice here... most of SIMS is just names and addresses. Hardly the kind of stuff requiring military level security! "

 

Is this what Data Protection Act rules says?

 

There is far more than names & addesses in todays MIS db - from full SEN details, ethnicity, free meal, behaviour to all new data items coming along every year.

 

 

jwood: "having teachers ... on a different network "

 

Please see flat netwoks thread elsewhere and John Condon's entry in the above.

[GrumbleDook]

The topic has been split. This is not something done lightly but keep the discussion to the relevant thread.