Access to SIMs data permission form?

[paulellam]

So been asked to setop CPOMS in school and we have to setup a SIMS link with them. As we are now hot on paper trails and procedures, amongst all of the many procdures and policies we have in place I dont have one for allowing SIMS link (our most sensitive data...)to said company.

 

How do you do this in you school? I know the head will allow this access, as the head has asked me to set it up, but I need a paper trail to cover my setting up the link.

[rom1984]

Could you be a bit presumptuous and email the head saying that when the new policy/procedure is created on how to log safe guarding concerns could you include the fact that the school has a Sims link set up between CPOMs and the school which updates them with pupil information (i.e student names, contact details, safe guarding details etc) and that has been authorized by the head teacher due to the nature of the data.

 

When we implemented CPOMS this is what we did and we included specifics things in the new policy such as CPOMS should only be accessed on school desktop PC, staff should use CPOMS to communicate about safe guarding issues and not email, it's staff responsible to log out of Sims etc etc.

 

Other than that just send him a polite email double checking that you are Ok doing the Sims Link and put a brief explanation on what the "Sims Link" actually means.

[paulellam]

Ha ha, yes great idea on both counts!

[mavhc]

https://www.ssllabs.com/ssltest/analyze.html?d=stjamesbolton.cpoms.net

 

Looks OK, although they've obviously not tested themselves, two HSTS headers.

[pete]

Do you have a data-sharing agreement in place with the company? Have you read/amended/discussed it as necessary?