Using cloud based MIS at home

[ITGuyNW]

Hi all

 

We've now entered the space of being able to access SIMS type data anywhere. Our staff use laptops that they can use in school and at home.

 

Is anyone in this position? If so, what have you done about security? There's obviously less hoops to jump through now to access sensitive data.

 

MFA is a must. What else? VPNs?

 

Thoughts please

[supportman]

Hi all

 

We've now entered the space of being able to access SIMS type data anywhere. Our staff use laptops that they can use in school and at home.

 

Is anyone in this position? If so, what have you done about security? There's obviously less hoops to jump through now to access sensitive data.

 

MFA is a must. What else? VPNs?

 

Thoughts please

 

I don't think it needs any more security than in school really, assuming there is a decent timeout on the login and have Single Sign on with Office 365 setup. Of course you can have MFA there if you want.

 

Bromcom has both time and IP based access control per user. But we don't feel the need to use it.

 

Not sure about Sims though, as running over a remote desktop has its own security challenges!

[Roberto]

> What else?

 

Ensure that the resource can only be accessed by a trusted account using a trusted device. E.G. with Microsoft's conditional access, I'd implement MFA and also require the device to be Azure AD joined or Hybrid Azure-AD joined. If you wish to use mobile devices or (again, staying with the Microsoft nomenclature for now) their laptop is managed in Intune, you can also require the device itself to be compliant with MDM policies.

[Oaktech]

We're a Bromcom house at all of my schools. We implement MFA for all users and user based geofencing for all users except SLT. Other than that we rely on the acceptable use policy and audit logging. Edited September 18, 2023 by Oaktech

[PotNoodleTech]

Hi all

 

Our staff use laptops that they can use in school and at home.

 

 

Just wondering - are they school devices that they also use at home? Or home devices that they also use at school?

[Olliedawg]

I only allow Bromcom to be accessed from our Public IP, so staff must use the VPN from other locations to use. This also prevents Bromcom from being logged into on non school devices.

[Mako]

SSO with 365, which has MFA and conditional access so any attempt to log in outside of known sites should trigger an authentication prompt.

[ITGuyNW]

Just wondering - are they school devices that they also use at home? Or home devices that they also use at school?

 

school devices they can use at home

 

- - - Updated - - -

 

Thanks for the replies everyone!