Accura2k7 Posted May 21, 2018 Posted May 21, 2018 Help please, Just had a bod turn up from a different LA and a different school asking for his own login into FMS. He has not at any point supplied a list of what he whats access to, just full access to FMS. I have said categorically no chance, you are not employed by the school, and not from our LA, but he may guide one of our staff members to go through what information he requires. I have told our interim-head and new head who both agreed, but the bod replied, we will see what your Chair of Governors says when she gets in at lunch. Can anyone give me ICO guidance or regulations that will aid in stopping the request as as far as the Head, Business Manager and myself can see, he is here to nose around. Thanks All.
Linfit Posted May 21, 2018 Posted May 21, 2018 Its your Data, your decision who has access to it. What is he there for ? If its a specific det of info he wants it should be possible to report on it and print it out, or as you say have a member of staff show him the data he specifically needs, but until you get chapter and verse on what he wants and why, and what authority he has to be there, he can take a running jump. 2
LTurner Posted May 21, 2018 Posted May 21, 2018 Your right with this. Never let anyone who isnt apart of your LA or your School/Trust have access. 1
localzuk Posted May 21, 2018 Posted May 21, 2018 Who is he? What is his role? Has he been hired to do work with your FMS system? What has the Chair of Governors got to do with the day to day running of the school - governors don't have that sort of control. What right is he claiming that he has to this access? If the head has said no, then the answer is no. The Chair can ask him to change his mind, but he can still say no. 1
Accura2k7 Posted May 21, 2018 Author Posted May 21, 2018 No idea who he is except Richard from this school. No idea on his role. He certainly has not be hired to do any work that I am aware of. Chair of Governors has nothing to do with the running of the school. He has given me no information to what he was to view/see/edit, and only mentioned, we will see what your Chair says when she gets in at Lunch.
Steve21 Posted May 21, 2018 Posted May 21, 2018 (edited) If that's the case there shouldn't even be a question about him seeing data The answer is no. *Edit - Even more so I'd raise a query as to who let him in to see you and why etc As no reason they should even be walking about your school if no-one knows who they are... Steve Edited May 21, 2018 by Steve21 2
elsiegee40 Posted May 21, 2018 Posted May 21, 2018 Your Chair of Governors has no say in operational decisions and this is operational. If the Board of Governors (Governors act as a corporate group, nobody can make decisions alone except the chair in an emergency) needs something from FMS there will be correct operational paths to follow. Surely your Business Manager should be your point of contact for this? That person should know what’s happening and be screaming that strangers only go near it “over their dead body” without proper arrangements in place.
Accura2k7 Posted May 21, 2018 Author Posted May 21, 2018 Your Chair of Governors has no say in operational decisions and this is operational. If the Board of Governors (Governors act as a corporate group, nobody can make decisions alone except the chair in an emergency) needs something from FMS there will be correct operational paths to follow. Surely your Business Manager should be your point of contact for this? That person should know what’s happening and be screaming that strangers only go near it “over their dead body” without proper arrangements in place. Agreed with you there, unfortunately my SBM is trying to say no chance but its not working, hence why she asked me to step in a say no from the Network Managers point of view.
pete Posted May 21, 2018 Posted May 21, 2018 If no-one knows why he's there, why hasn't he been marched off the premises? No-one's paid for a penetration test / audit to see if staff will blindly hand over credentials have they? 1
localzuk Posted May 21, 2018 Posted May 21, 2018 I'm still confused. Who has said for him to do this, and why? What is it he's doing? Random strangers don't turn up asking for access to finance systems... 1
PotNoodleTech Posted May 21, 2018 Posted May 21, 2018 Random Stranger? Full Finance access? Nope nope nope nope. If you end up being instructed by the head to do it then make sure the instruction is on letter headed paper. 1
leegcvcc Posted May 21, 2018 Posted May 21, 2018 I'm still confused. Who has said for him to do this, and why? What is it he's doing? Random strangers don't turn up asking for access to finance systems... ....but if they did, I would raise one eyebrow and then ask them a shedload of questions. The answers would determine when I could return my eyebrow to it's natural non-suspicious position.
Accura2k7 Posted May 21, 2018 Author Posted May 21, 2018 ....but if they did, I would raise one eyebrow and then ask them a shedload of questions. The answers would determine when I could return my eyebrow to it's natural non-suspicious position. I am very sceptical at the moment, from what I gather it has come from the Chair of Governors but had no official confirmation either verbally nor written as to whats going on, just implying what and who so I am sticking to my guns! He has since asked why we ban memory sticks on site, and why cant he get to any website he like!!! You couldn't make this up! 1
Steve21 Posted May 21, 2018 Posted May 21, 2018 Why are you even letting him on the network and computer system if you don't know who he is or why he's on site? That's breaking about every rule in the book as it is currently... Steve 1
Accura2k7 Posted May 21, 2018 Author Posted May 21, 2018 Why are you even letting him on the network and computer system if you don't know who he is or why he's on site? That's breaking about every rule in the book as it is currently... Steve He is currently using his own laptop on our guest wifi which provides internet access only.
Steve21 Posted May 21, 2018 Posted May 21, 2018 He is currently using his own laptop on our guest wifi which provides internet access only. I refer to my above comment You're allowing someone you have no idea who it is on your network and internet... If it was his own device it wouldn't be blocking USB either... Steve 1
Accura2k7 Posted May 21, 2018 Author Posted May 21, 2018 Head has allowed him to use his own machine, our guest wifi is vlan'd away from the main network so there can be no breach from the networks point of view. Memory sticks, agreed, but our GPO doesnt allow any member of staff access to removable storage.
synaesthesia Posted May 21, 2018 Posted May 21, 2018 The nearest explanation I can see for this to occur is in the case of investigation of mismanagement but even then it would have to come from, in writing, multiple people. If it's a governor involved then it would be from the head & chair. If it's the head, then it would come from the board of governors and possible other SLT. Regardless, as it stands you treat them the same as Joe Bloggs from the street. Perhaps advise the chair to raise an FoI request?
Steve21 Posted May 21, 2018 Posted May 21, 2018 You seem to be missing the point on many levels though... you're telling us no-one on site knows who he is or what he's there to do or why he's accessing finance information. You're now telling us he's trying to use removable storage on your devices (else wouldn't know it's blocked) in the first place. (or another member of staff is breaching by trying to give them info) These two points alone should be throwing you huge red flags before you even get onto anything else... If the head knows why he's there and what he needs surely he can answer your questions regarding finance? Steve 1
LTurner Posted May 21, 2018 Posted May 21, 2018 You seem to be missing the point on many levels though... you're telling us no-one on site knows who he is or what he's there to do or why he's accessing finance information. You're now telling us he's trying to use removable storage on your devices (else wouldn't know it's blocked) in the first place. (or another member of staff is breaching by trying to give them info) These two points alone should be throwing you huge red flags before you even get onto anything else... If the head knows why he's there and what he needs surely he can answer your questions regarding finance? Steve I'm with Steve on this. I personally wouldn't allow him on the network until such a point has been made by the head that he is allowed.
Accura2k7 Posted May 21, 2018 Author Posted May 21, 2018 I have un-authorised his device from the wifi network, and I will speak to the head. Thanks guys
hardtailstar Posted May 21, 2018 Posted May 21, 2018 I have un-authorised his device from the wifi network, and I will speak to the head. Thanks guys @Accura2k7 make sure you get all this noted down whats going on, it could come back to you. Also tell us how things go! 1
Banjo Posted May 21, 2018 Posted May 21, 2018 Can I ask who is appointment was to see and who invited him in to school on this day? What role function does he play at the other school? Sounds well dodgy to me?!
Accura2k7 Posted May 21, 2018 Author Posted May 21, 2018 Right, see the Chair of Governors and Head. Chair has asked this guy to come in, he is a Director of Finance for some big Academy trust (nothing to do with us!) to come and have a look. He was initially put to our head as someone to assist with our SBM to set the budget, something she has already done. In reality, he wants to go through everything (in essence an audit under an different name). I have been told he has to have internet access so he can access email. Got this in writing from the Head. I have told the Head that as far as I am concerned, he cannot have access to any information or access to our FMS unless he puts forward a FOI, this appears to have been ignored. (although I still have not given him access) I am going to word an email to the Head, Deputy, Chair and Vice Chair about my concerns over this, and state that should any data leave the site, then I consider it a Data Breach and will report it as that. I am fuming, the SBM is fuming, our HR Manager is going stir crazy but the Head is oblivious and clearly blind sited by the Chair!
mavhc Posted May 21, 2018 Posted May 21, 2018 It's the Head's responsibility in the end, just make sure you have everything in writing, including all advice you give
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now