[sims] SIMS Learning Gateway + staff use from home

[bandgeekmafia78]

Hi.

 

When staff access and use the SIMS Learning Gateway from their home PC does anyone know if any sensitive data is stored in the PC's cache? We encrypt all staff laptop HDDs but it got me thinking about home PCs and whether staff are using them to access SLG and any other sensitive pupil data.

 

Thanks.

[vikpaw]

[creese]

I didn't see this originally.

 

I have just spoken to our 'SLG expert' who says the only data cached is probably cookies but not pupil data. But I would would check with Capita to get a definitive answer. Having looked into SLG in the early days, I am sure this question was raised and we were suitably reassured.

[localzuk]

By default, I know Chrome, Firefox and Opera won't, unless the HTTP header 'cache-control: public' is in place.

 

From what I've read, IE follows the headers too.

 

So, it depends on what your sharepoint install is set to do - if you have cache-control: private and expires-end set to a short distance in the future, it will not cache things to disk, only to memory.

Edited May 23, 2011 by localzuk

[andyturpie]

We don't have SLG, but what we have got as part of our support from SITSS is VPN access. Teachers laptops connect via VPN and then run a script to map their network drives (including the sims drive). With also hiding the c:\ drive and disabling save to desktop, we guess we have it around 99.9% secure as non of the data is actually leaving the school.

[vikpaw]

@creese i thought it was missed, and seemed interesting, i'm defo wondering what the story is, especially bearing in mind, the SIMS desktop app itself relies on creating temporary files all over the users profiles, including things like the attendance certificate etc.

 

@localzuk - can you stop sticking your tongue out please you need a space in there !

[vikpaw]

Perhaps a stupid question..(?):

 

If there was some kind of caching / remnant of info left behind, would the onus be on the school / provider to inform the parents that they might leave sensitive info on whatever device they use to access? At home, not such a big deal, but say when they use their work PC, or laptop, internet cafe, etc.

[creese]

@creese i thought it was missed, and seemed interesting, i'm defo wondering what the story is, especially bearing in mind, the SIMS desktop app itself relies on creating temporary files all over the users profiles, including things like the attendance certificate etc.

 

 

We have a few schools using SLG, to varying degrees, for a few years now. I know we went through the security concerns thoroughly at the start. My memory is not what it was, but I'n certain we would not have gone ahead with it if we thought anything was kept on workstations.

[andyturpie]

I think Capita should bear the brunt IMO - as long as schools are taking resonable precations to work on the data, users cannot be held responsible for how the program has to work with that data. The program should be adapted to suit if not its a classic case of the tail wagging the dog.

[creese]

There is a danger of the thread running away into the realms of mass speculation. It is, in my opinion, a huge IF. I'm 99.9% sure there is no caching of data.

[PhilNeal]

There is no caching of data. If you put your laptop to sleep it will awake with the screen you were on.

[vikpaw]

There is no caching of data. If you put your laptop to sleep it will awake with the screen you were on.

 

Doesn't that mean it is cached?

[localzuk]

Doesn't that mean it is cached?

 

In a way, yes, but caching to memory is done by every application and there's no way round it as that is how computers work. However, this is more about 'non-volatile' caching, ie. putting stuff on the hard disk rather than in memory.

[vikpaw]

I knew that. Just read what Phil wrote a different way now and it makes more sense. The laptop thing was an example.