GrumbleDook

YoE gives approx age ... not really something you want to give out.

It is a work in progress.

I've ditched in-ear headphones now (except for emergencies or when on secret, undercover missions for the Elders of the Internet ... and if you can see this part of the post it is because the Elders have deemed you worthy!) After a recent ear infection, I have started with dry skin in my ears and the wax is not very oily ... so I get itchy ears ... and it is so hard to resist the finger waggling. I was told to try baby lotion on it, but to remember to rinse my ears each day and that has worked quite well ... but it is worse on hot days.

Welcome @jenatddm ... it was good to meet and chat last week at the conference. Just to let you know that @maturelady and I had a really good chat with @jenatddm and it looks like there will be more materials to use for helping schools get to grips with GDPR ... as mentioned at the conference, GDPR in Schools will be a good resource and DefendDigitalMe are ardent campaigners to get the DfE to sort out advice to schools as well.

Ooohhh ... make me an offer. It is worth saying that this one is a bit of a special one as it was my prize from Meru for winning the NAACE ICT Impact Award for Technical Support, and is engraved as such.

We get asked about support for iOS 8 devices that haven't been moved up to 9 because of performance issues ... so we all know schools are going to keep running iOS 10 devices for some time. 5 years is not bad for most tablet devices, and I'll be disappointed that it can't take 11 too ... wondering what to do with the family one now.

First on is Microsoft? I need more time to wake up!

I've asked around and they do seem like opportunists.

IIRC you need the iLife bundled version, which will then update.

So, we are on the 25th May 2017. One year from today GDPR comes into play and there is still a lot to do ... heck, there is still a lot to do for the DPA in many schools, but this will kick things up a gear. Mods / Admins, would it be possible to have a dedicated forum within the School Administration section (similar to e-Safety) so that relevant conversations can be put in there? It will also allow for a sticky threads for resources, etc. Please?

IANAL ... just a person with a passion! Oh, and I like chocolate too!

Something from K-9 ... but I'm not telling you what!

You have wiped the drives, made them inaccessible to general recovery and they remain an asset within the organisation. As long as you have something in your policies about not trying to access deleted data / only IT Support can run recovery software, then the only risk is the loss of the device and it being recovered by someone else. Possibly look at doing more than a reformat? If you can find examples of drives being recovered after doing this (i.e. there are) then it isn't good enough. To some extent, it is dependent on the level of personal information held on the device ... even desktop devices will have copies of files, roaming profiles, etc ... so you need to make an assessment on that.

Not to be picky but and not aimed specifically at you ... more a case of a chance to make some general comments ... ;-) This is correct for the disposal of items containing data and for WEEE. If you are disposing of items that do not contain data then it is only WEEE compliance that is required. Most schools do not operate a CMDB. They may operate an Asset Register and that is the closest you will get. This does not have to be a discrete policy but both your Data Protection / Information Security polices and your WEEE/Waste policies should contain references to the disposal of assets from your asset register. Please also note that you will see references to assets to also mean 'information assets', when you are conducting any data protection / information security audits ... there is a difference. A physical asset may contain information assets that require disposal. Make sure anyone you work with knows and can explain the difference ;-) Slight rewording to give context perhaps ... All Data owners and Data Processors should ensure that they list any company disposing of assets containing data (e.g. computer hard drives) as *a* data processor (or sub-data processor, depending on contractual arrangements). Permission of the data owner may be needed for a Data Processor to sub-contract work to another Data Processor (i.e. if they are not already named and permitted then you have to go and get permission) Please note the word *should*. Add DipCOG on there. If you are going to use a company to do this (and for many it is a good way of managing risk) then it would be good to work with other schools (via MAT and/or LA) to get sufficient bulk to make it worthwhile. One of my slides next week will be a sad hammer and a sadder drill. Those days are gone :-(

The lease agreement could specify that data destruction will take place. There is a particular copier company that refused to agree to this in a lease, until it got pointed out that they would no longer be able to supplier any Council, Govt department, etc ... they changed their minds very quickly.

Hi Mike I'll be popping down from York the day before, so might pop into to catch up and chat through the presentation if you fancy a cuppa? Maybe if @maturelady is free too?

By having a contract with them, it covers what they will do with the equipment. If you are owning all the risk of destroying all data then the contract will have to say that, so it covers them from any risk as well. Contracts are a two-way thing.

MDMs, yes ... you can have multiple servers available with Deploy.apple.com / ASM and a device can be a member of only one MDM group at a time, but it is not a problem to move them back and forth ... j For VPP, you download a token for each MDM you need to use it with ... but yes, you can end up having problems ... especially if the licences are not handed back! The token is simply granting the MDM access to call on your licences and assign them. Don't use the same token twice, you just download a new one each time. The existing tokens, if already on an MDM, will still work. If testing, I would suggest you only test with apps on VPP that are free and you have plenty of licences for. We usually get a school to buy an app with lots of licences on VPP, show it syncing to the available app list and away you go with deploying to a DeviceID (so doesn't need an AppleID to be used). We have seen schools run out of licences before when testing with us ... because they have been handing out licences via different MDMs and not keeping a track ... so be careful.

When it comes to managing and handling data then you should also be completing a risk assessment. We are not talking going down ISO27001 here, but there are a few key areas you should consider. Always remember CIA when it comes to DP and IS (Data Protection and Information Security). Preservation of Confidentiality, Integrity and Availability. What are the risks for the various data sets? Think about the triad above. This should be part of your audit.

I remember PATCH from an NSA session about 10 years ago as an acronym ... Protect Against Terrorism and Covert Hackers Possibly just a rework?

When talking about iTunes I presume you are talking about DFU mode? There are a couple of YouTube vids out there to help you get the timing right to enable it. You then reload the OS via iTunes. Then it is back to an out of the box device and you can re-enrol in your MDM.

I'm busy all week with installations and training in North Yorks (Tue/Wed), EDIT (Thu) and then travelling home via a few schools / partners.

Something like this? ------- Hi [Headtecher's/Line Manager's name] I've been selected to attend a free, peer-led CPD event in [location], on [date]. The agenda looks pretty packed but some of the areas of expertise that I'll be able to tap into are quite pertinent to some of our plans over the next [3 months / 6 months / 12 months / 3 years] and will help to ensure we keep a focus on the benefits tech can bring to education, whilst also keeping a track on risks. We may even have the opportunity to chat with NHS staff who had to deal with the recent ransomeware issue. So far, there are delegates with expertise in [get a rough idea of the skills of those going but make it relevant to your school's needs]. The event itself is free [so we only need to cover travel to / and I will cover the travel costs to] [location]. ------- How does that sound?

And breathe ... and relax. Ever had to turn updates off because an MS patch had been breaking machines? That could be the reason. Ever been distracted when you been on the way to turn something vital back on? It happens ... it shouldn't, but it does. It should have been spotted after a month (we all do a routine sampling of logs to catch this like this, don't we?) but it wasn't and that is the thing I would be equally annoyed with ... Just be glad you caught it now.

You can do ... some can be email managed so that an emailed document is printed if coming from the right address. It is a case of time and setup needed.