synaesthesia

You can't eliminate the risk, only do as much as you can to reduce it - otherwise we'd be in the dark ages.

This is wider than just MIS data; after all, it's been accessible for years on personal devices whether in someone's pocket, on their tablet, on their home PC, or the public library PC they've logged onto whilst on holiday abroad. The same goes for shared file access, 365/Workspace data, email - all of which can include special category data and therefore the data protection aspects should already be in place from a policy perspective. Risk mitigation should be in place for these - requiring biometric/pin authentication to unlock the device, a "work profile" on personal devices, 2FA etc.

Very much a human thing I'm afraid, keep drilling it into them. You could specify that any emails to students must be done via whatever messaging platform you have with your MIS and ensure pupil usernames are very different from staff, but it still won't stop it happening. Hammer home the GDPR aspect and what it can mean for the school & their job if they do something particularly bad!

I'd be making damn sure that "consultant" never works in IT/security ever again.

Agreed with the above - the "hack" removal has been well advertised recently, and even if it doesn't happen, it could happen at any point in the future with little to no notice, possibly leaving you in quite serious trouble going forward. If you've got an EES agreement with microsoft you could potentially extend Windows 10 support for around a pound a machine which might buy you time.

Heh, same here. Ridiculous. At least it says cpoms rather than meritec now.

Someone from ESS is feeling particularly brave!!

Taken with a pinch of salt. There's absolutely no doubt the removal of phones has a positive impact from the perspective of schools, but it does cause other problems related - withdrawal, attention spans etc. Out of the frying pan, into the fire. Easy to speculate how much of this is down to over reliance on this tech and certainly the modern parental technique of shoving a tablet/phone in a young child's hands as a babysitter.

This is on a "best efforts" approach, so if you don't have the means, it's not the end of the world and the ICO aren't going to come for you and your family for it. Hence very important to do a full data cleanse prior to losing your SIMS license. I'd make it a priority to ensure any special category data is migrated or stored otherwise then ensure that is entirely sanitised from SIMS.

Just keep a copy of the database. It's standard SQL so easy enough to extract data should you need to. Anything else, look at things like Recordlink Exporter for document server etc.

You misunderstand - I meant "let's make it happen" Anyway, for a company so keen on seeing a return, they're not doing a very good job - at least from an outside in perspective, it looks as if they're doing everything they can to bury it!

True. However there's one lawsuit we would all be 100% behind. Bromcom/Arbor/Others/The World vs ESS. Make it happen. Make ESS fold like a piece of tissue paper in an origami tournament.

"Our tender process has been a lengthy and lawful one, taking into consideration all of the major players." "But you haven't included Bromcom, can you explain this decision?" "We have to take into account all factors, including the likelihood of falling foul of litigation whether true or false, and this is deemed an unacceptably high risk with this company" "Fair enough, crack on!" As said before, decent enough product, company ethics border upon American.

I've been doing this for our trust and ended up adding this as a feature request to Google. Would have been nice, as I had over 2000 apps to go through. If the user hadn't set up the app themselves, there was absolutely no way of seeing who was the actual users.

What you save in financial cost, you lose in mental cost. The only thing slower than grannys blocking an aisle in a supermarket is Edusync trying to pull classroom information.

They can't have their cake and eat it "3 monitors is too complicated" "We want 3 monitors". Compromise as psydii's suggestion IMO! Otherwise you'd have to end up with a HDMI splitter as well as the hub, something else to fail.

Why another screen, what benefit does that give? There's one built into the laptops. Straight USB-C docks would be far easier, offering charging, display, audio, network passthrough on the desk.

Yes indeed, my thoughts entirely, but just want to ensure we're covered in case someone throws their Vtech My First Computer out of their pram followed by a lawsuit to anyone that looks at them funny Hoping to get a trust perspective on it; we just don't want to get United Learning'd.

Hi all, Anyone moving away from SIMS, have you had any explicit instruction from ESS to destroy any backups that hold SIMS or the SIMS Database please? The wording seems very sure and it also feels very, very wrong. Obviously it can only be done to "best efforts" level short of destroying other data from that server but I want to check if any other schools/trusts have looked into this further? Cheers

Support from FSE recently has been really poor; we're looking to move away from them.

Aye, nothing serious enough to warrant major investigation, so will leave it as "nope". I suspect that is the case as I remember the firewall side being iptables based. Cheers

Slightly random one, I need to allow access to a hostname which is a DDNS host, therefore the IP changes. Is it possible to add firewall rules based on the host rather than an ever changing IP?

My head hurt reading that - and I've heard year 8 talk.

I'm using a pair of Iiyama Prolite XUB2792SQN but frankly despite being good screens they're so unreliable in their connection it's unreal. Identical specwise to the Dell hubs (used the 23 and 24 inch HE's) but I prefer the Dells. They weren't 100% consistent either with passthrough and very flaky with anything other than the USB C cables they came with. Otherwise HP G4 usb C desktop hubs separately. Not as convenient but a bit more reliable so far, only had them in a few months.

I stand by my comment about picking up a high end 3xxx series or maybe even a 4xxx series, for the sake of cost/price benefits!