[bromcom] Downloading Sensitive Docs

[ejacklin]

Hi all,

 

Is there any process anyone is aware of to restrict the downloading of confidential documents from Bromcom onto personal devices?

 

Thanks

[vikpaw]

Strict processes and a signed computer usage policy are vital. Then you’d have to check with Bromcom.

 

It would be the same issue with other systems, you’d need to restrict the IP range to ensure it happened at school which makes it a pain to use off site. Kills the cloud element!

 

Plus you’d need a workaround to allow parental access elsewhere.

 

The only way I can think of is some form of 2FA that locks usage to known school devices.

 

This would be practical. It’s not going to stop someone taking a photo of data or moving to a USB drive but that’s where your policy kicks in.

[elsiegee40]

This would be practical. It’s not going to stop someone taking a photo of data or moving to a USB drive but that’s where your policy kicks in.

 

This. You cannot prevent the determined from taking a copy of a document.

 

Screenshot, photo with their phone camera, ... there are many many ways of getting round downloading.

 

Proper security ensuring only those who need access have access and well-trained staff following well-written, well-enforced policy and procedure is the only way to cover your organisation. * Looks sternly at the Leadership Team *

[Bromcom_Marketing]

This. You cannot prevent the determined from taking a copy of a document.

 

Screenshot, photo with their phone camera, ... there are many many ways of getting round downloading.

 

Proper security ensuring only those who need access have access and well-trained staff following well-written, well-enforced policy and procedure is the only way to cover your organisation. * Looks sternly at the Leadership Team *

 

Yes indeed @Elsiegeek and threat of " Screenshot, photo with their phone camera, ..." applies to all systems in any application including on premise / non-cloud systems. We agree that well-enforced policy and procedure is the only way to address these concerns.

[RootsSchImp]

Hi all,

 

Is there any process anyone is aware of to restrict the downloading of confidential documents from Bromcom onto personal devices?

 

Thanks

 

Agree 100% with other posters saying this requires a policy rather than a technical fix. One 'nudge' you could do though is to take right to view documents out of the regular teacher/admin roles and create a specific 'doc viewer' role with IP or time restrictions to ensure docs could only be viewed by users on site/in sch hours

 

Ed

[vikpaw]

Agree 100% with other posters saying this requires a policy rather than a technical fix. One 'nudge' you could do though is to take right to view documents out of the regular teacher/admin roles and create a specific 'doc viewer' role with IP or time restrictions to ensure docs could only be viewed by users on site/in sch hours

 

Ed

Is time/ip restriction a feature in Bromcom, or would you SSO to AD and use logon hours?

[RootsSchImp]

Is time/ip restriction a feature in Bromcom, or would you SSO to AD and use logon hours?

 

It's a native feature - you can apply time or IP restrictions to roles or individual users in Bromcom