Jartech News : May 21 Bulletin - Data Security.

Please bear in mind that this is a news digest and a wider context must be considered alongside this advice.

2 Step Verification :

This additional security protocol is a fantastic way of securing access to school email systems. However, the school must consider that this then requires staff, at some stage, to use either the more popular text message, or smartphone “App” solution to receive the 2nd step of authentication. This may prove to be an issue in schools who do not allow teachers to keep their mobile phones in desks in the classroom. It can be argued that the benefits of 2 step verification outweigh the risks of a mobile phone in a desk in a classroom but if this is not accepted by the school, there are other forms of 2 step verification such as a small USB dongle that can be used as an alternative to a mobile phone. Please speak to your technician.

USB Storage :

The “security hole” created by the use of USB storage refers to either unknowingly bringing viruses into the school network or loss of confidential data as a result of losing a usb device “in the wild” which would trigger a number of GDPR consequences. Antivirus software can mitigate virus risks but the fact remains that viruses are sometimes “too new” for antivirus software and can slip through the gaps. Loss of media can, of course, be mitigated with the use of encrypted USB devices which cannot then be accessed by anyone who finds a lost device. Sophos Antivirus can be used to restrict workstations to only allow encrypted USB storage.

However, the fact remains that although encrypted storage keeps data secure from a GDPR perspective, it does not protect the user from losing data they have spent a long time working on if the USB device is lost or simply stops working.

There are, of course, some scenarios in which USB storage devices yield a legitimate use case. External providers, for example, may need to bring in resources on such media. This, however, can be substituted with a protocol of having materials emailed prior to a visit.

Links to the services provided by LGFL are within the email sent with this newsletter.

Again, please speak to your technician to find the best solution for your school. Or feel free to call Jartech.

https://www.Jartechconsultants.co.uk