leegcvcc

good question @habz99 . I have had to do the same and wonder what everyone else does, I have to assume they're doing the same?! and many thanks to @themightymrp for the process. Very easy and worked a treat. Now just to make it as painless as possible for parents etc to use.

are you using ADFS? there is a cache there. JUst a thought

A colleague found one for £30. Not free, but it looks really good and quick. Movavi Not been tested in anger nor read their Privacy statement but needed something quickly

i'm not sure it's "full retard on GDPR", it's about people being more concerned than some about being compliant. Those who cut corners and have it all sussed out mentally, may well be right and save themselves a lot of work, good on you people. For us that are just trying to ensure our procedures are tight and legal, these sorts of scenarios need more consideration than I want to give it, for sure! It's rare that clips are shown to parents, but it's a great deterrent apparently after siding with their child over the alleged account, and CCTV is needed to demonstrate they shouldn't always believe their child!!! I think I will look at blurring if a clip is used for parental viewing, and then re-assess it if it increases to a point where is overly time sapping. There are some pretty quick and cheap blurring software so will look at that. Thanks for all the input folks... it's been emotional

I think we all have I can write whatever I like in the Policy, but my question is "do I HAVE to blur faces to be compliant?". Seems like there is no definitive answer judging by the mixed responses. One of the dangers of showing other students is there are students that a lot of people shouldn't know attend the school, and they could be in a clip. Hassle as it seems, it makes sense to not be able to show this to a parent when they have no need to view other students activities. And yes, some of the other students are vandalising in the clip although unrelated. THanks for replies, great angles from all. (geez, some folk get so stroppy at times )

Thanks for replies... ..but do we need to? Appreciate blurring is the way, but have you tried blurring everything except for one student running around hitting people for example? It's a huge overhead potentially of having to blur that's the issue, so I am asking whether it needs to be done. Obviously some will be straight forward, but still manual intervention on top of downloading and preparing clips.

Hi all, Apologies if I have missed a single article on GDPR! but I have a question regarding showing a CCTV clip to a parent where their child has been caught vandalising some equipment and the Head of School wants to show the clip to the parent. The clips includes a lot of other students obviously. Should this be treated as the parent not needing to see the other students and should be blurred out? Or is it OK to show the clip? Any help appreciated.... quickly

We have 1-2-1 and the staff take "ownership" of them. THat is the important bit. We pay for component failures and repairs, their Dept budget will pay for accidental damage, loss of chargers, cables etc. We have very little damage, and that's because they are more careful with the laptops because it'll come from their budget if they aren't! Saying that, I'd love PCs in every classroom as just dealing with so many custom built laptops is time sapping for numerous reasons, whereas a fixed domain PC would be a breeze. When a laptop is in for repair, you need to provision a spare for their use. Not especially hard work, but extra considerations all the same. We have a 3-5 year warranty from the purchase date and don't have insurance on them individually.

....but if they did, I would raise one eyebrow and then ask them a shedload of questions. The answers would determine when I could return my eyebrow to it's natural non-suspicious position.

Could you not opt to not do a firmware partner upgrade and see how the upgrade went prior to upgrading the working controller? I'm so worried now I'm off to buy another SAN and 2 controllers

1 SAN may suffice, but certainly 2 controllers for me

Are the disks GPT or MBR?

Isn't this what DPOs are for? To tell non-DPOs what to do in order to be compliant? I'm clearly well behind everyone here with GDPR but what is the difference between sending paper recorded delivery and an unencrypted USB stick? I'm also guessing video clips are possibly more damaging that paper or digital files not containing images

Maybe get your guys to do an IT audit first? That way, they may identify weak points that require updating, some investment etc. and a snapshot can be gained and referred to. If the audit isn't suitable or acceptable, then look externally? Just a thought.

+100 for roombookingsystem.co.uk with SIMS as we have a 2 week timetable Moved to it from MRBS and Moodle and don't even think about room bookings now... ever! Love it and their support is great when required

That surprises me. Rock solid here, not one AP has failed in 3 years. I don't use all Aerohive AP features though as use dedicated Windows RADIUS VM's and Windows certificate servers, Windows DHCP etc, so all the AP's do is wireless basically although it's fairly complex I'd say.

Aerohive has been a joy here with all the different requirements with different VLANs, different access needs, different authentication requirements. Support has been fabulous from LAN3 throughout.

@foofighterjim Totally agree. I just was mentioning that after all you've done technically to mitigate as much as you can externally, there is policy to back you up. Such as Staff should be reporting phone loss/theft etc if they sync school email onto their personal devices. Sorry, I can't communicate very clearly which is a problem considering my job role

Any joy?

There is also Policy to be considered here. It's impossible to stop it all. As long as the staff have been informed/trained to a satisfactory degree about data security when working remotely, and you have measures in place to stop the majority of unnecessary data storage outside of the security boundaries, then the staff member has a responsibility themselves to also keep the data secure. Under GDPR they can be held accountable if they go against policy and don't adhere to them etc. OK, it could be bad press for the School, but at least the school should be able to demonstrate their practises, procedures and policies are rigid enough for the school not to be liable and fined etc. I gave up thinking I was in control years ago

I'd recommend QNAP TS-431. Bought 2 of them for work recently. So impressed with all the apps and features. It's a network in a box! If i was buying for home, i'd get one of these Spent ages looking at NAS's and these were my pick.

Not really without googling myself Plenty of stuff out there. You could just utilise it for outbound spam and turn off inbound spam otherwise you'll have 2 places to check I guess, but maybe a second tier would be good. I use everycloud for spam filtering off the shelf, and just deploy rules on 365 to send stuff to quarantine or reject etc as well as some cloud filtering for specific users. Here's a quick search result - on-premise and 365 EOP

You don't need to move over, you just need to route your incoming and outgoing mail through 365 servers for their filtering etc.

They know more than that.... ask them for some proof like a log entry so you can investigate further. and yes @FN-GM great shout about 365 option

everycloud has outbound filtering. I had a load of spam being sent from a user account, i think it was on his PC, and the provider messaged me about it. I created a filter to stop all outbound mail from the account until rectified. Once he'd changed his password and removed from home PC etc, virus checked, i removed the filter. You can trial it and it's very easy to implement, or ditch.. if not happy. Are you just unconvinced that you've stopped it being a relay or is this the next step towards better filtering?