School email address for external consultant

[6Foot2]

Sorry, wasn't my intent.

 

Thanks. No harm done, it was just a bit of a surprise to see the reply open that way. All sorted.

 

 

Back on topic...

[MrKJLS]

Last time we did this, we made them sign the AUP and gave them a restricted account with locked down address books and everything. Sometimes we will prefix the account with [email protected]

 

It allows us to give access to school resources and allows us to apply our retention periods and other policies. If there on long-term contracts we get them added to Arbor and then there account can be managed by Salamander so once there contract is over it can be disabled automaticly.

[GrumbleDook]

A fairly normal request, and access control is key to management of this. The use of a single account by multiple individuals is a pain and there are risks associated with this, especially for when there is a data breach ... the blame management that can happen seriously causes all sorts of things to come out of the woodwork, so ensuring organisational measures are carefully followed is important.

 

Ideally, a restricted set of accounts for each individual with access to a shared mailbox is technically the easiest option, but organisationally might not be. Also, having multiple accounts accessing a shared mailbox doesn't get around the needs to ensure that all account holders need to be trained on data protection, privacy, safeguarding and information security to *your school's* standard ... not anyone elses.

 

Risk assess ... log it in the risk register and assign someone in manglement as the risk owner.