The National Cyber Security Centre (NCSC) has published guidance to help schools provide security in the use of remote learning.
It has produced a blogpost for technical staff responsible for managing remote learning tools as part of a wider initiative that also includes guidance for parents and on erasing data from donated devices for charities.
The technical staff guide includes attention to data access, highlighting the role of well configured instances of Microsoft Office 365 and Google Classroom for staff and students who do not require access to a virtual private network. It says this will be particularly useful when staff are using personal devices.
Advice on user administration and management includes following NCSC guidance on password policies, using one-time passwords that users must change of first use, and setting up a single sign-on so users do not have to enter multiple credentials when accessing new applications.
The blog also includes sections on device administration and management, video conferencing and preparing for incidents.
The guidance for parents includes using strong passwords, setting up two-factor authentication and resetting any second-hand devices before they are used.
For charities NCSC advises encouraging donors to erase their data, erasing all data on donated devices and avoiding passing on devices that are no longer supported by the manufacturers.
Image from iStock, Eclipse Images
