Learning Possibilities
Learning Possibilities

Learning Possibilities

  • About
  • Solutions
  • Case Studies
  • News
  • Charity
  • Our Sites
    • TIESEA
    • Learning Islands
Contact

Why Information Security Standards Make Sense to School Leaders

by TerryE / Monday, 09 March 2015 / Published in Articles, Uncategorized
why-information-security-standards-make-sense-to-school-leaders

Having worked with Learning Possibilities as a client, a consultant and as a Project Manager, I still find myself relating almost all my activities to the following phrase, “What Would School Leaders Think?”

For most people in schools, awareness of Information Security standards is limited, and usually only heard about when talking about data protection or when they have been told that they can’t or shouldn’t do something, by their IT Manager, the Local Authority or a Governor.

In fact, most schools should be able to easily understand not just the importance of Information Security but how it is assessed at companies like Learning Possibilities, and that understanding is all dow​n to thinking like OFSTED.

As with OFSTED visits to schools, companies certified to ISO27001 (the principal Information Security standard) will have regular audits and inspections from an external body.

As with OFSTED, Leadership is key. It is not about recording security incidents or how quickly they are dealt with, it is not about recording how well your backups run and it is not about recording the results of penetration testing. It is about looking at how Leadership set objectives, evaluate them and justify subsequent decisions.

Yes, there is record keeping. Yes, there are processes and procedures that have to be followed. Yes, there is regular training on Information Management, Information Security and Data Protection. Yes, there are issues and risks to be dealt with. However, these are there to provide evidence to Leadership and the quality of work is more important than ticking boxes on the 114 controls across 14 groups.

Internal audits are the book scrutiny sessions and staff observations. External audits are the OFSTED visits. The Information Security Management System contains your Statement of Applicability (let’s call it your SEF), your policies and procedures, your record of decisions, your Objectives and Measures (5 year plan?).

It goes on. There are so many similarities and helps show School Leaders that Learning Possibilities understands the impact of OFSTED, not just because of the educational impact, but because we have our own version to go through. We also know all too well about it being about key decisions, not just weighing the pig!

External audits are done each year, and you recertify after 3 years. Out of the 3 possible outcomes only the top outcome, which is effectively a 100% adherence to the standard, gets you the certificate.

What does this mean for our customers? Well, the standard is a way of showing both the importance of Information Security to us as a company across all our work, and also that we put in the time and effort on it, ensuring that it is part of our core ways of working.

So, after a 13 month programme of work we are more than pleased to say that we passed our External Audits for this year and have now been issued with our certificate, after coming through with flying colours, the equivalent of Outstanding.

I say a 13 month programme of work … we have already started on the work for the next 3 years, including the work on the international update of ISO 9001:2008 to ISO 9001:2015, the standard for Quality Management. Another opportunity for us to hold ourselves open to inspection against the highest possible standards.

Tagged under: E-safety, Education, Learning Platforms, LMS, Schools, Security

What you can read next

E-Library
App Updates
Learning Possibilities & aamra announce exciting new partnership
lp365-makes-market-leading-technology-available-to-schools-through-a-simple-and-easy-to-use-interface
LP+365 makes market leading technology available to schools through a simple and easy to use interface. How important is it for schools to have access to market leading technology?

Learning Possibilities Limited

Suite 11, Building 6, Croxley Business Park, Watford, WD18 8YH, UK Company Registration No: 6256264

phone

020-8236-1000

E-mail

info@lpplus.com

Social

Learning Possibilities, LP+ Mark and Logo are registered trademarks of Learning Possibilities Limited.
© 2020 Learning Possibilities Limited - Company Registered in England and Wales.

Privacy policy
EULA
Modern Day Slavery Act

Learning Possibilities Limited

Suite 11, Building 6, Croxley Business Park, Watford, WD18 8YH, UK Company Registration No: 6256264

Contact

020-8236-1000
info@lpplus.com

Social

Learning Possibilities, LP+ Mark and Logo are registered trademarks of Learning Possibilities Limited.
© 2020 Learning Possibilities Limited - Company Registered in England and Wales.

Privacy policy | EULA | Contact

TOP