Questions for technical support (Security and Online Safety)

Transcription

1 Qustions for tchnical support (Scurity and Onlin Safty) It is a school s rsponsibility to nsur that thir chosn tchnical support providr(s) mt th infrastructur rquirmnts for onlin safty and scurity. This rsponsibility cannot b assumd thr must b chcks mad by th school ladrship tam on a rgular basis. This documnt provids suggstd qustions for thir tchnical support. Th first st of qustions must b askd vry trm. Th othr sctions ar qustions that should b askd at last onc a yar. RAG rating Rd Action is rquird immdiatly Ambr This is a dangr but thr ar good rasons why it is lik this / solutions ar activly bing sought Grn Fully mt It is not ncssary for all qustions to hav a grn rspons, as all schools ar diffrnt. Howvr, a rcording of ambr indicats a dangr. Qustions with an hav a dirct rlation to Onlin Safty Furthr support can b providd by contacting LIM (limadmin@somrst.gov.uk) Pag 1 Action is rquird immdiatly This is a dangr but thr ar good rasons why it is lik this / solutions ar activly bing sought Larning and Information Managmnt contact:limadmin@somrst.gov.uk Fully mt

2 Qustions for tchnical support (Scurity and Onlin Safty) Hav all th staff had a ntwork password rst this trm? Hav all rmovabl dvics (laptops/usb sticks) that stor prsonal data bn ncryptd? Ar th administrativ (srvr) passwords up-to-dat and stord safly? Has any password misus bn dalt with? Ar thr any dvics that do not us th school s filtrd intrnt fd? Ar thr any loggd filtring incidnts? Has rquird action bn takn? Hav all dvics had th latst OS 1 updats applid? Ar all nw dvics loadd with th corrct scurity and virus protction softwar? Is thr a pattrn to loggd hardwar incidnts and has action bn takn? Trmly Qustions Nots Hav th backups workd? School Tch Support Dat Pag 2 1 OS Oprating Systm th softwar that controls th computrs including scurity spcially machins with XP which should b upgradd to a nwr oprating systm This is a dangr but thr ar good rasons why it is lik this / solutions Action is rquird immdiatly Fully mt ar activly bing sought Larning and Information Managmnt contact:limadmin@somrst.gov.uk

3 Qustions for tchnical support (Scurity and Onlin Safty) Do all larnrs, usrs and mmbrs of staff hav and us individual usrnams and passwords? 2 Ar thos usrs with gnric usrnams and passwords (.g. KS1 and blow, gusts) always suprvisd? Is thr a gust login for visitors/supply tachrs? Ar all dvics protctd by passwords? Ar staff passwords complx and changd rgularly (at last trmly)? Ar all staff dvics (ipads/tablts) protctd by complx passwords/pins? Hav all rmovabl dvics (laptops/usb sticks) that stor snsitiv prsonal data bn ncryptd? Ar th administrativ passwords up-to-dat and stord safly? Has any password misus bn dalt with? Is accss to th MIS systm scur and ar usr accss prmissions rviwd rgularly? Qustions to b askd vry yar Passwords and Prsonal Data Nots Pag 3 2 Individual passwords might not b dmd appropriat for young usrs of Ky Stag 1 and blow th rasons for this must b statd in th schools Onlin Safty policy This is a dangr but thr ar good rasons why it is lik this / solutions Action is rquird immdiatly Fully mt ar activly bing sought Larning and Information Managmnt contact:limadmin@somrst.gov.uk

4 Qustions for tchnical support (Scurity and Onlin Safty) Filtring and monitoring Dos th school hav a filtring srvic that is dsignd for ducational us? Ar thr any dvics that do not us th school s filtrd intrnt fd? Dos th managmnt of th filtr provid th flxibility or scurity ndd? Is thr a list of th most popular sits visitd? Nots Is thr a list of th sits th school hav allowd or dnid? Is thr a list of thos popl who hav prmission to bypass th filtr (Staff Proxy)? Ar all school mobil dvics using th schools filtring srvic? Ar thr any loggd filtring incidnts? Pag 4 Action is rquird immdiatly This is a dangr but thr ar good rasons why it is lik this / solutions ar activly bing sought Larning and Information Managmnt contact:limadmin@somrst.gov.uk Fully mt

5 Qustions for tchnical support (Scurity and Onlin Safty) Hav all th dvics had th latst OS 3 updats applid? 4 Softwar Updats Nots Is thr a list of th installd softwar/apps? Hav all th softwar/apps bn updatd to th latst vrsion availabl? Ar th softwar licnss for th softwar valid and currnt? Ar all dvics loadd with th corrct scurity and virus protction softwar? Ar all nw dvics scurity markd and ntrd into th invntory? Ar th srvrs functioning ffctivly? Hardwar Support Nots Is thr any quipmnt coming towards th nd of its functioning ffctivnss? Is thr a pattrn in th loggd hardwar incidnts? Pag 5 3 OS Oprating Systm th softwar that controls th computrs including scurity 4 Machins running old OS which prsnt scurity issus, such as XP should b immdiatly updatd to a nw oprating systm This is a dangr but thr ar good rasons why it is lik this / solutions Action is rquird immdiatly ar activly bing sought Larning and Information Managmnt contact:limadmin@somrst.gov.uk Fully mt

6 Qustions for tchnical support (Scurity and Onlin Safty) Ar staff prvntd from loading programs onto thir workstations/laptops? Ntwork Scurity Nots Can rmovabl mdia (.g. Mmory Sticks, CDs) b usd on workstations? Do all dvics that connct to th ntwork hav virus protction? Is th virus protction softwar up to dat and rgularly updating on all computrs? Ar thr any loggd incidnts du to ntwork scurity or virus issus? Has backup workd on th srvr(s)? (This should covr both MIS and fil srvr). Has a rstor bn tstd? Ar th scurity masurs that prvnt hacking or othr unwantd intrusions into th ntwork appropriat? Is th cach srvr working ffctivly? Pag 6 Action is rquird immdiatly This is a dangr but thr ar good rasons why it is lik this / solutions ar activly bing sought Larning and Information Managmnt contact:limadmin@somrst.gov.uk Fully mt

7 Qustions for tchnical support (Scurity and Onlin Safty) Hav thr bn any WAN 5 issus? Connctivity Nots Hav thr bn any LAN 6 issus? Hav thr bn any wirlss connctivity issus? Is thr a pattrn to th loggd ntwork connctivity incidnts? Is th wirlss ntwork scur? Ar prsonal dvics allowd on th wirlss ntwork (BYOD 7 )? Pag 7 5 WAN Wid Ara Ntwork th Intrnt fd from th supplir 6 LAN Local Ara Ntwork th schools intrnal ntwork 7 BYOD Bring Your Own Dvic This is a dangr but thr ar good rasons why it is lik this / solutions Action is rquird immdiatly ar activly bing sought Larning and Information Managmnt contact:limadmin@somrst.gov.uk Fully mt

8 Qustions for tchnical support (Scurity and Onlin Safty) What school IT issus/dvlopmnts hav to b addrssd? Dvlopmnts Nots What IT dvlopmnts nd to b invstigatd? Can you validat th rquirmnts against indpndnt advic? Ar dvlopmnts chckd against onlin safty rquirmnts? Tchnical Staff (including thos tachrs with IT rsponsibilitis) Ar thr clar procdurs for th monitoring of staff that carry out tchnical support? Ar thr clar procdurs to support and protct staff in situations that might involv accss to illgal/unsuitabl matrial? Is tchnical training ndd by th support tam? If so, what? Hav tchnical support staff signd a sparat AUP? Nots Pag 8 School Tch Support Dat Action is rquird immdiatly This is a dangr but thr ar good rasons why it is lik this / solutions ar activly bing sought Larning and Information Managmnt contact:limadmin@somrst.gov.uk Fully mt