Monitoring staff screens, legality etc...?

[GrumbleDook]

I still don't see it. Our policy covers use of the school equipment (ignoring the signing a sheet saying work use only), that equipment is still ours if it is in school or out of school, and therefore the AUP covers its use wherever it is in use - if other places have their own policies regarding devices in use in multiple schools then the person working there would also need to deal with that (we have a few of these in our school - but they are part of our federation, and all schools in the federation have the same AUP). However, if the laptop is issued by us and the person has a second job somewhere, then using that computer for that other job would itself be against our AUP (much like taking it outside the UK would be too).

 

So, with our policy, there is no difference between home and work locations. If the policy covered use of IT in the school (and not 'equipment owned by the school') I'd agree with you though.

 

You have a well-considered AUP ... not everyone is in this position or would be able to have all staff meet it. Does your AUP clearly state that any personal information on or viewed using the devices might be accessed by authorised members of staff within the schools? What if you see confidential information that you have no right to? This would be a data breach by that individual and so should be reported to someone ... do you have a policy or procedure which covers this and ensures that it is done?

[GrumbleDook]

This also rings alarm bells... At the moment the CCTV is hosted in our office, when a member of staff asks to look back at recordings we just click the buttons and what not and let them see it.... Students are never permitted to watch it unless they are supervised by an appropriate member of staff but any member of staff can, and do, come in here and watch the recordings...

 

The Wiki has some sample policies around CCTV School Policies - Wiki ... in need of an update now (when I get round to it!). The ICO has a very good section on CCTV too.

CCTV - Guidance for Organisations - ICO

[shadowx]

The Wiki has some sample policies around CCTV School Policies - Wiki ... in need of an update now (when I get round to it!). The ICO has a very good section on CCTV too.

CCTV - Guidance for Organisations - ICO

 

Thanks for the links, about to head off home now but will have a read tomorrow. Draft version of the AUP is made too so it's been a fairly productive afternoon

[TechMonkey]

A union would have a field day if something were to come about from a member of SMT monitoring staff with no policy, AUP, forewarning or knowledge!!

[russdev]

Hi

 

First I am no fancy city lawyer so won't go into legal side. However....

 

Impero has solved this if want to get approval from person you are monitoring. Create a staff user group in Impero and then under group properties you can under action on remote control choose a number of options disable, ask and auto deny and ask and auto allow.

 

Secondly under group properties can make Impero workstation disable itself and again can be done for just certain users by using user groups.

[speckytecky]

When the chaps from Impero set ours up certain client machines were not added and others were put into the Staff User group. Reading the comment by @russdev above I'm going to look into that further toward setting up a Group that have the Staff in so that the settings listed can be applied to the Group - in case they log on to any of the student client machines.

[shadowx]

Hi

 

First I am no fancy city lawyer so won't go into legal side. However....

 

Impero has solved this if want to get approval from person you are monitoring. Create a staff user group in Impero and then under group properties you can under action on remote control choose a number of options disable, ask and auto deny and ask and auto allow.

 

Secondly under group properties can make Impero workstation disable itself and again can be done for just certain users by using user groups.

 

Epic reply

 

I was wondering if we could do that and I was going to ask around so you've solved that problem! I've already spoken to Impero support with regards to remove staff entirely from the console.

 

speckytecky: setting up the staff group is easy enough, just make a new group call it what you want, then on the properties under the membership rules (I cant remember the wording and don't have it on this machine) just change the drop down to AD Group and then enter the name of staff group (In our case "Staff")

 

Next to ensure that staff dont show up anywhere else you can edit the membership of the other groups and choose AD Group again but put a "!" in front of the group name (So for us it's "!Staff") which equates to "NOT Staff" hence staff dont ever turn up in the "ICT Room X" groups.

 

After speaking to Impero you can actually go one step further which is what I have done, in the Server GUI you can assign permissions to the "Entire Network" group, so if you set no permissions on it (IE everyone, including admins, is denied) then you are basically prevented from seeing staff at all.

 

Im sure RussDev can explain it better or failing that send me a PM and I can talk you through it in a bit more detail

 

Imero is really nice, one of the reasons we licensed staff (Well, THE reason) is to remotely assist staff with silly things like not being able to use spellcheck or something and to quickly deploy a program if we need to (SCCM is slow slow slow) so having the ability to request access to their screen etc.. is exactly what we wanted so thanks for that RussDev!

[Ex-MGSTech]

If its any help, feel free to look over our Staff AUP here: http://www.mgs.kent.sch.uk/mg/content/download/2552/11620/version/1/file/Staff+Acceptable+Use+Policy.pdf

 

It was borne out of the kent E-Safety group and has had lots of consultation with legal depts and unions etc

 

Steve