[sims] Missing information

[timbo343]

Is there a way in SIMS we can see an activity of what users do?

 

We've got an issue where some data in SIMS has gone missing even though it was there one day and not the next.

Edited February 1, 2018 by timbo343

[vikpaw]

Not really. Check the other threads on auditing / lost data. The old system manager used to kind of try.

 

If you have suspicions, you might be able to get access to the SQL logs to see if user x logged in but nothing specific or conclusive.

 

Always used to crop up as an issue with behaviour logs.

[Scifigirl]

I think you will find from this thread:

 

http://www.edugeek.net/forums/mis-systems/165497-what-no-audit-trail-safeguarding.html

 

SIMS doesn't have an audit trail function

[pete]

Nope.

 

The DPIA for the use of SIMS is going to be interesting.

 

"So, you put all this sensitive personal, medical, and other data into it?"

Right

"And everyone's got their own login?"

Yup

"So you can link actions done to a specific person?"

Nope

"Seriously?"

Yup

"So anyone can log into SIMS, access or change whatever their permissions allow and there's no way of knowing who did what?"

Precisely.

"What has the supplier said?"

'ooh it's really tricky' and then they hide from us.

"So we're categorising this as 'WTF, who thought this was a good idea?'"

Pretty much.

[PhilNeal]

If anyone can change data in your implementation of SIMS, I would suggest that permissions have not been tightly controlled!

All attendance & assessment data is audited.

 

With the close links that Capita has established with the ICO, I can't imagine that schools will be exposed in any way.

[pete]

If anyone can change data in your implementation of SIMS, I would suggest that permissions have not been tightly controlled!

 

If someone has a login to SIMS and is given permission to change sensitive personal data in module "X", there is no customer-accessible audit trail as to what they changed and when that change was made.

 

All attendance & assessment data is audited.

 

What about the medical data? Behaviour incidents? Exam entries? Personnel? Behaviour? Personal data about staff, students and parents?

 

With the close links that Capita has established with the ICO, I can't imagine that schools will be exposed in any way.

 

I remain unconvinced.

Edited February 2, 2018 by pete