SIMS Learning gateway and data security

[reggiep]

Hi All,

Forgive me if I sound like I'm not sure what I'm on about, that for two reasons. 1. I normally don't go near SIMS but we are between SIMS managers and 2. I didn't pay attention in the past when working with SIMS.

 

Anyway at out last ICT strategy meeting I was asked to look into the learning gateway, how we could go about getting it and using it and also what security policies we would need to put in place.

I believe our LA may well be setting up a gateway for all schools but only whispers at the moment.

The worry was that our data security policy may be out of date and may not cover the use of a learning gateway.

 

Does anybody have a policy that covers this?

 

Thanks

[matt40k]

There's something around Becta re: VLE and how you need two type authenication. I would ask your LEA. Even if they haven't set anything up they should be able to help. Also have a word with your Capita\SIMS Sales rep.

[GrumbleDook]

It is now generally regarded as two factor security. This is username / password and over https. Ideally you would have two factor authentication over a secure connection and this can be done via username / password and then a memorable keyword, or by using a security token (eg Vasco token).

 

But the username / password and over https is generally regarded as suitable for the type of data used over the net.

 

Also have a look at the recent Becta update to data handling. Becta Schools and click on the link about updated data handling guidance.