iPad app whitelist for staff

[themightymrp]

I can't seem to find an existing thread regarding this, but I have a question.

 

For those schools who supply iPad's to their staff, do you make use of an approved whitelist of apps? Or do you allow staff to install their own apps as they see fit? Do you perform a DPIA for all apps in use?

 

Or inversely, do you make use of an app blacklist?

 

Would be interested in answers. Mainly because we are about to distribute new iPads (to replace some older ones on a lease agreement) and the question was raised regarding data protection. What can apps access on devices, especially as we encourage staff to use them for work purposes, can data leak out through uncontrolled means?

[Brimstone]

Dependent on what is your schools strategy for teaching and learning?

 

If you give staff a Managed Apple ID with strict privacy rules for ad and app tracking then they can use all the great features of collaboration and sharing but can not access the app store or buy content themselves, the best MDM's use a self service store that lets MDM admins add those apps to the self service portal so teachers can download them when they need them.

 

Creating a whitelist with over 450,000 iOS Education Apps....? I doubt it very much.

Edited April 9, 2024 by Brimstone

[DalekSec]

Short answer: Yes

 

Do not let them use their own apple ID's, use federated. Only push out pre-approved apps via your MDM (What is your MDM?) Intune you can use Company portal for self service.

[themightymrp]

We use Lightspeed as our MDM. Looks like I may be revising how we do things

 

Many thanks