Hackers post Hereford schoolchildren's data records on dark web

[mavhc]

https://techpress.net/step-by-step-implementation-of-azure-application-proxy/

[gaz350b]

Not free and requires p1 level licensing. Although once you take all the benefits of p1 it’s cheap.

[mavhc]

I don't have p1 licensing and it still works

[gszech]

So here are some questions about your school IT systems:

 

1. Do you have any data security accreditation in your school ? ISO27001 anyone ?

2. Are you certified with Cyber Essentials and audited annually ? (If you are they would highlight SQL SIMS issues in the report)

3. Does your SIMS connection offers AES-256 bit encryption ?

4. Do you offer two step verification to your SIMS ?

5. Are your servers CCTV monitored regularly ?

 

If your answer to the all above questions is yes, then yes it's better to keep your SIMS internally.

 

Also how many primary schools you know that can offer any of the above or proper IT management ?

[mavhc]

Which sims connection though? The one on my LAN? who knows, it's on the LAN, that's pretty secure.

 

The one on the internet? That'll be behind SSL or something.

 

2FA? Again, LAN vs Internet.

 

The flaw is putting your LAN on the internet badly