security compact. only authorized security administrators shall be allowed to create a user account...

7
Security Compact

Upload: silvester-gibbs

Post on 03-Jan-2016

212 views

Category:

Documents


0 download

TRANSCRIPT

Page 1: Security Compact.  Only authorized security administrators shall be allowed to create a user account for the PowerSchool application.  The LEA security

Security Compact

Page 2: Security Compact.  Only authorized security administrators shall be allowed to create a user account for the PowerSchool application.  The LEA security

Only authorized security administrators shall be allowed to create a user account for the PowerSchool application.

The LEA security administrator, or his/her designee, is responsible for promptly disabling the PowerSchool user account upon termination of a user from the school or LEA or upon cessation of a user’s needs to access the PowerSchool system.

Passwords used for the PowerSchool system should be unique to PowerSchool.

Passwords should not contain dictionary words or abbreviations. Passwords expire every 90 days and users must create a new password.

Passwords cannot be reused until 5 other passwords have been used. At no time, will anyone from DPI or County Office call a user and request

a user’s password; NO CCS employee should release his or her password to anyone.

What’s the same: Passwords

Page 3: Security Compact.  Only authorized security administrators shall be allowed to create a user account for the PowerSchool application.  The LEA security

Users must never share passwords with anyone.

Users must never allow a teacher assistant, students, substitute teachers, student teachers, or anyone else to enter or view any information in PowerSchool.

What’s the same: Workstation Security

Page 4: Security Compact.  Only authorized security administrators shall be allowed to create a user account for the PowerSchool application.  The LEA security

After five unsuccessful login attempts, the user account is disabled.

Passwords must contain at least 1 uppercase letter, 1 lowercase letter, 1 special character, and 1 numeric character.

What’s changed: Passwords

Page 5: Security Compact.  Only authorized security administrators shall be allowed to create a user account for the PowerSchool application.  The LEA security

Users must never leave their computer without “LOCKING” the application or without signing out of PowerSchool and/or locking your workstation.

Passwords should not be stored in clear text on a desktop system, including web browsers, nor should they be written down and visibly displayed in the vicinity of the computer workstation. Word or text file Sticky notes on your desk or monitor

PowerSchool should never be accessed from a shared public location outside of the LEA such as a public computer lab or public Wi-Fi hotspot. Starbucks Panera Bread

Workstations should be checked for the presence of “keystroke memory plugs” or more commonly named “key loggers”. These are 0.75 – 1 inch devices, shaped like a plug or cylinder, which can be plugged in between the keyboard cable and the CPU.

What’s changed: Workstation Security

Page 6: Security Compact.  Only authorized security administrators shall be allowed to create a user account for the PowerSchool application.  The LEA security

You could get hacked! No matter how secure you think you are, it could still

happen.

You are working with sensitive information Students addresses, grades and medical information Social security number

A district near us, got hacked in March, exposing students information Union County

Why should you care?

Page 7: Security Compact.  Only authorized security administrators shall be allowed to create a user account for the PowerSchool application.  The LEA security

Read and understand the compact before you sign.

Don’t chance it.

Take Security Seriously