ICT Security - School of Coding

Mission Statement

The School of Coding is a safe, well ordered and caring environment for learning. It delivers high quality education to all its students and supports them to develop their individual potential for growth, self-worth and self-control.

High quality outstanding teaching, and clear and consistent guidance and support facilitates students in succeeding in education. Our broad and balanced academic and vocational curriculum will provide students with access to a broad range of accredited qualifications as well as educational and social experiences, which will address their learning and emotional needs. Our purpose is to support every student to develop their true potential, make positive contributions to their families and find fulfilment in employment.

Values

Alternative Provision doesn’t mean a dumping ground…it’s mainstream with the reasonable adjustments to succeed
High standards and high expectations are incredibly important and are the corner stones to a successful school
The School of Coding should become the go-to place for educators from across the country to see best practice
Good simply isn’t good enough
Learning is about a journey and there is more than one way to get to the destination
Qualifications, manners, respect and opportunity should be the foundations for students that need a second chance.

School Ethos

High standards – students are pushed to achieve beyond their potential, and staff work to ensure everything that we do is better than people expect.

Daring to Dream – students at The School of Coding may have been in an educational setting where they lacked aspiration to be successful, at The School of Coding we challenge students to reach their potential and go on to further education and employment.

Traditional Values – some things often get forgotten in education, at The School of Coding we pride ourselves on mutual respect, good manners, making a positive contribution, supporting one another and an orderly, litter free environment.

Success – can come in many virtues, at The School of Coding we celebrate the small steps every day and tell students when they are doing well. We ensure that students can have a successful future.

Personalised Support – all students at The School of Coding have a Learning Coaches who guides them, sets them bespoke targets and supports them in making social and academic progress.

Purpose

This policy is intended to provide a framework for such use of the School of Coding’s IT resources. It should be interpreted such that it has the widest application and so as to include new and developing technologies and uses, which may not be explicitly referred to.

Scope of Policy

For the purpose of this policy, any electronic, mobile, computing device (for example laptop, netbook, tablet, and mobile phone) will be referred to as a ‘device’. Staff, employees, third parties, students, contractors, and any other external party may be referred to as a ‘user’ for the purposes of this policy.

The ‘appropriate level of authority’ should be determined according to the employer’s decision-making structure. This policy applies to any users whom have access to the network, but does not form part of any contract and can be varied from time to time, in order to comply with legal and policy requirements and in consultation with the appropriate bodies.

Throughout this policy any reference to; wireless, WiFi, network, broadband, internet access, and infrastructure (switches, cabling, routers, wireless access points) will be referred to as ‘connectivity services’.

Users of the School of Coding’s devices are bound by this policy. The School of Coding seeks to promote and facilitate the positive and extensive use of Information Technology in the interests of supporting the delivery of learning, teaching and innovation to the highest possible standards. This also requires appropriate and legal use of the technologies and facilities made available to users of the School of Coding.

Acceptable Use

All users, devices and connectivity services:

When logging on to the network, the user must always use their own username and password.
Any user who identifies a security problem on the School of Coding’s network must notify IT Services immediately.
Users must follow the Password Policy. Any user who suspects that their password has been compromised, accidentally or otherwise, should change their password without delay and report this potential security breach to IT Services.
Users must not use devices connected to the network to gain unauthorised access (hacking) to any computer network.
Users must not attempt to spread computer viruses.
Users must understand that the information they hold on the network is not private and can be inspected at any time.
Users must understand the network employs several monitoring technologies to record access to the internet, keystrokes and catalogue open windows.
Users must not store personal documents/pictures/music on the School of Coding’s network.
Before leaving a device, users must always log off or lock their device and check this procedure is completed.
Users must not attempt to gain access to the local drive of any machine or to create local accounts (administrative or otherwise).
It is strictly forbidden for users to attempt to share drives, folders or files across the network. File sharing or the running of personal servers is strictly prohibited.
Only software that has been provided by IT Services may be run on the computers unless prior consent from the School of Coding’s Network Manager it obtained. Users are not permitted to import or download applications or games onto shared machines.
Students will ensure that they have permission to use the original work of others.
Where work is protected by copyright, users will not download or distribute copies (including music and videos). Employees/Staff

Staff are reminded that they have a duty of care with regards to Child Protection, Safeguarding and Radicalisation and should refer to the appropriate policy or DSL/DDSL.
Staff must not disclose to a third party the personal or sensitive details of another remember of staff, pupil or a pupil’s family. When sending emails, staff should ensure the anonymity of addresses by making use of the BCC (blind carbon copy) functionality when addressing bulk emails.
Staff must ensure that they do not retain copies of personal details including photographs of another member of staff, pupil or a pupil’s family on their devices. Data of this type can be accessed via SIMS, therefore, paper copies of lists and/or other pupil data should not be taken home.
Staff should ensure devices connected to School of Coding accounts are kept secure whilst in and out of school and report any loss to IT Services immediately.
Staff must not store school/School of Coding material on cloud folders (excluding Office 365), USB pens or external hard drives if they are not encrypted.
Do not disclose personal or sensitive data to third parties, including app developers without written authorisation from IT Services or their line manager.

Devices

Some users are provided with either a dedicated device for the betterment of their teaching and learning and/or administrative duties. These devices will be fully supported and maintained by IT Services and personal devices will be supported in connecting to School of Coding services. By accepting the provision of a laptop/mobile device, users agree to and sign the appropriate School of Coding document detailing our expectations. See Appendix 3 & 4 for the appropriate agreement.

Personal Devices

When users are connected to the School of Coding Wireless network you are bound by all rules in this Acceptable Use Policy.
Users that carry a personal device on School of Coding premises MUST ensure that the Mobile AP or portable hotspot access point functionality is turned off.
Mobile devices bought in on to School of Coding premises by any user are their own responsibility and liability. Users are strongly advised to take out adequate insurance cover as you are not covered by any school insurance policy.
Mobile phones will be out of sight and switched to silent.

Email & Connectivity Services

Whilst the School of Coding’s connectivity services exist principally for enhancing the educational purposes of the School of Coding, staff may make personal use of these services in their own time provided this does not detrimentally affect the School of Coding’s primary function. Users should also be aware that all internet usage is logged.

Users must not breach another person’s copyright in any material.
Users must not attempt to access inappropriate websites using the School of Coding’s services and should be aware that all activity is monitored.
Users must not upload or download any unauthorised software or attempt to run that software. In particular hacking, encryption and other system tools are expressly forbidden.
Users must not engage in activities that are prohibited under UK Law. Thus, the transmission or creation of inappropriate material, material subject to copyright or protected by trade secrets is forbidden.
Your email address is property of the School of Coding.
Users must not send electronic communications which are impolite, indecent, abusive, racist or in any way intended to make the recipient feel uncomfortable.
Users must not make inappropriate use of the email system and address book, such as sending bulk emails, chain emails or for personal marketing purposes.
Staff should not use a personal email address to contact pupils or parents.
School of Coding email accounts should only be used for purposes relating to School of Coding matters.

Enforcement

Any breach of the appropriate points of this policy or agreement may result in disciplinary action being taken by the School of Coding. This responsibly can be delegated to Local Governing Bodies (LGBs) or school leaders depending on the type of breach or the stakeholder(s) involved.

Appendix 1 – Acceptable Use Policy Agreement

Acceptable Use Policy

Term & Conditions

In signing this document, you accept that you are solely responsible for your actions, or the actions of others, undertaken whilst using your user account or device. Your responsibility is to use the School of Coding’s network acceptably and appropriately in accordance with the Acceptable Use Policy. The network (its devices and connectivity services) are for the purpose of School of Coding related activities and it should be used with due consideration for the rest of the community who share in its use.

The School of Coding takes no responsibility for any personal devices bought on to the premises.

Acceptance

I accept the above policy:

Name: __________________________________________

Username (i.e 12345Smith): __________________________________________

Tutor Group (if applicable): __________________________________________

I have familiarised myself with this document. I understand my responsibility as a user and the consequences of misuse.

Signature: _______________________________________________

Date: _______________________________________________

__________________________________________________________________________

Parent/Guardian – Acceptance (Students Only)

As the parent or legal guardian of the above student, I have read the Acceptable Use Policy and having understood its contents grant permission for my son or daughter or the child in my care to use and access the School of Codings network.

I understand that network access is provided for educational purposes only. I also understand that every reasonable precaution has been taken by the School of Coding to provide a safe a secure environment but the School of Coding cannot be held responsible if a student’s action is in breach of the this AUP.

Parents/Guardian of students are responsible for wilful or negligent damage caused by their child to any device owned by the School of Coding.

Name of Parent/Guardian: ________________________________________

Parent/Guardian Signature: ________________________________________

Date: ________________________

Appendix 2 – WiFi Registration (Staff & Students)

Acceptable Use Policy – WiFi Registration (Staff & Students)

Agreement

The School of Coding is responsible for the implementation of this policy. However, it may choose delegate this responsibly to Local Governing Bodies, school leaders or IT Services. This document can only be actioned the appropriate “Acceptable Use Policy” has been signed and returned.

This agreement allows additional access to the School of Coding’s wireless network using personal devices and is an addition to the School of Coding’s IT Security and Acceptable Use Policies.

How can I use the Wireless Network?

Step 1: Obtaining permission to connect

In order to access the wireless network you must be a current student or member of staff. Once you have read this document, please sign and date it at the bottom of the last page. Bring this signed document to the relevant IT Services office. Once received your request will be processed within 1 working day. Confirmation will then be sent to your school email account.

Step 2: Prepare your computer

Before you bring your personal device on to School of Coding premises or while you are waiting for your request to be processed, please complete the following steps:

Patch/Update your devices e.g. Windows Update or Software Update
Install Antivirus software
Remove any Peer-to-peer file sharing programs e.g. BitTorrent

Failure to maintain a virus/spyware free device will result in immediate disconnection from the school’s network without notice.

Step 3: Connecting to the network

Once you have received confirmation (via email) confirming access to the School of Coding’s wireless network you can join your personally owned devices to the wireless network as detailed in your confirmation.

Please be aware the wireless networks are only available in specific locations, during certain hours and can be withdrawn at any time without notice.

Wireless Access Policies & Procedures

The School of Coding provides free wireless access to both current staff and current students in designated areas. The wireless network is provided as is and the School of Coding does not guarantee compatibility or up-time. By using the School of Coding’s wireless network, you agree to comply with this and all other polices governing the use of ICT.

You agree not to share your username and password with any other user for any reason. Users found in breach of this rule will have their WiFi access removed permanently.
The School of Coding does not provide any technical support for staff or students using personal devices on the wireless network apart from assisting in connecting to the wireless network itself.
The School of Coding does not guarantee all devices will be compatible or the quality of the service.
Users may not connect their personal devices to the wired network. The School of Coding may discontinue this service at any time without warning.
I understand that the School of Coding will monitor my use of the ICT systems, email, internet and other digital communications.

Finally, the School of Coding accepts no responsibility for any files accessed and/or downloaded, software downloaded and/or installed, e-mail opened, or sites accessed while using the wireless network. Any damage done to the device from viruses, identity theft, theft, loss, damage, spyware, plug-ins or other internet-associated programs is the sole responsibility of the user.

Unacceptable Behaviour

Users are reminded they are bound by the terms and conditions set out in the School of Coding’s Acceptable Use Policies. The main points of the School of Coding’s Acceptable Use Policies can be summarised in the key sentences below. Users are NOT permitted to undertake any of the following actions:

Logging on to the network with another user’s account
Using computers to send offensive or harassing material to others, either internal or external to the School of Coding.
Altering the settings of the computers or making other changes which render them unusable by others
Tampering physically with the equipment
Attempting to access unauthorised areas of the network
Accessing inappropriate web sites or trying to circumvent the school’s systems. This includes the use of proxy servers or VPNs for this purpose.
Attempting to spread viruses via the network
Using school computers for any form of illegal activity, including software and music piracy.

Breach of the acceptable use policy may result in disciplinary action being taken.

Violations/breaches

All violations or breaches of this agreement will be dealt with in accordance with the School of Coding’s

Behaviour or Discipline policy. The School of Coding may delegate this responsibly to Local Governing Bodies or School Leaders. If suspected illegal activity has taken place the relevant authorities (e.g. Police) will be contacted.

Acceptable Use Policy

WiFi Registration (Staff & Students)

When bringing a personal device on to School of Coding premises you are fully bound by the terms of the School of Coding’s Acceptable Use Policies and the use of such a device is entirely and solely at your own risk.

In order to use a personal device within the School of Coding, the School of Coding must have on record, a copy of the Acceptable Use Policy signed.

Access to the School of Coding’s Wireless Network is a privilege, not a right, and this privilege may be withdrawn at any time at the sole discretion of the School of Coding without notice.

Staff and Students to complete

Name: _________________________________

Signature: _________________________________

Date: _________________________________

Appendix 3 – School of Coding Issued Devices (Staff)

Acceptable Use Policy – School of Coding Issued Devices (Staff)

Context

Being able to use a device for, and that is provided by the School of Coding is a privilege and not an automatic right for staff within the School of Coding. IT Services must balance the need for educational freedom that a device can bring alongside the requirements set out in law and by our own internal policies in order to deliver a compliant device that has the flexibility required for 21st Century teaching.

This policy aims to provide users with an overview of the process, what you can expect from IT Services and what access you will have to the device.

The Device

IT Services procure devices every year for use by staff within the School of Coding on a budget-dependent rolling programme. The device specification is driven by a need for the device to last a minimum of 4 years before it will be eligible for replacement. This specification is decided by IT Services who have the appropriate knowledge.

Each batch of devices is supplied “as is” and no modifications can be made to the device prior to its delivery. If a member of staff wishes to customise the device after delivery this cost (time and part) will be allocated to the appropriate cost centre via the normal ordering procedures.

Each device will have a predefined warranty attached to it, purchased by IT Services. Any issues with the device must be reported to IT Services immediately in order to take advantage of the warranty.

Access to the device

IT Services will ensure the device meets a standard baseline ensuring staff can use the device for its intended purpose. All devices will be “managed” (remotely accessible by IT Services) in order to deliver software updates, setting changes, enforce encryption and distribute core software.

As the recipient of a School of Coding device you will be permitted (in additional to the normal restrictions imposed on School of Coding devices) to:

Connect to and configure Wi-Fi networks
Install and configure printers

If additional permissions are required these will be granted at the discretion of IT Services on an ad-hoc basis.

Our expectations

To increase the longevity of any device it is important to follow these simple guidelines including but not limited to:

When travelling the device must not be “on display”. For example, when travelling by car the device must be stored in the boot for insurance purposes.
Reasonable care must be taken when moving around an academy site; a device must be transported in a protective sleeve or case (provided by IT Services) to minimise damage.
Never allow another user outside of the School of Coding to use the device. This includes family, friends and other third parties. To do so increases the risk of a data breach and can have serious implications for the School of Coding.
The device should not be connected to the mains constantly as this damages the charging ability of the battery and will reduce its lifespan considerably. Instead the device should be allowed to complete charge and discharge cycles.
Always lock your device when leaving it unattended. For Windows devices this can be simply done by pressing the Windows Key + L
The device should be restarted at least once per month to allow for updates to install. For Windows devices press the Shift Key + Shutdown Option.
Care should be taken when inserting or removing cables. Broken ports are not covered by warranty.
Never leave the device unattended and unlocked.
Refrain from using public Wi-Fi hotspots as they can be less secure and have snooping devices attached.
Do not make any attempts to circumvent the security settings on the device. In doing so you could be subject to the School of Coding’s disciplinary policy. Do not install peer-to-peer networking clients.
Do not store personal files (including photographs and music libraries) as this consumes network storage and can shorten the lifespan of the network.
A screen capture/keyboard logger is installed on each device for safeguarding purposes. It is a disciplinary offence to disable or tamper with this software.
Any issues relating to software corruption will result in the device being reconfigured. This process removes all existing data on the device and restores it to its baseline setting.

Enforcement

Enforcement of this policy lies with the School of Coding, although it may choose to delegate this responsibility through Local Governing Bodies or school leaders, depending on the nature of any breach and the stakeholder(s) involved.

School of Coding Issued Devices (Staff) Agreement

The following are the conditions under which you accept the named device. This agreement will start on receipt of the device from the School of Coding. The School of Coding reserves the right to transfer the device to another member of staff if you do not, or are unable to, for any reason, fulfil the requirements of this agreement.

Under this Agreement the School will:

Provide the named device for your sole use while you are a permanent full-time or parttime staff at the School of Coding. The device is for work use. You are permitted to use it outside work hours. However, it is for your sole use only, and not for use by students, family members or any other person.
Set up the device to enable you to connect to and make effective use of the School of Coding’s network, and provide a secure location for the safe storage of your device during the school day e.g. a classroom or office that can be locked.
Plan and manage the integration of the device into the School of Coding’s environment, and provide the professional development required to enable you to use the device effectively in your professional practice.
When required expect you to pay an excess for accidental damage or loss, or repair/replacement costs where the loss or damage is a result of your own negligence.
Have an expectation that you will abide by the School of Coding’s IT policies including the Acceptable Use Policy.

Under this Agreement you will:

Use the device for the purposes it was provided and abide by the School of Coding’s IT policies.
Provide suitable care and security of the device at all times and immediately report any damage or loss of the device to the School of Coding.
Be responsible for any software not installed on the device by the School of Coding, if your device was unrestricted prior to the signing of this agreement. This includes fines for illegal software or files and breaches of copyright.
Be prepared to cover the excess or the cost of repair or replacement of the device when the damage or loss has been a result of your own negligence.
Make a commitment to achieving the IT goals of the School of Coding and take part in the IT professional development activities provided for you by the School of Coding.
Make necessary arrangements for the return of the device to the School of Coding when you resign or leave the School of Coding or when you will be away from the School of Coding for an extended period.
In accordance with School of Coding policies, be held responsible for any involvement by yourself or any other user of your device in activities associated with accessing inappropriate or illegal materials.

Appendix 4 – School of Coding Issued Devices (Students)

Acceptable Use Policy – School of Coding Issued Devices (Students)

School of Coding Issued Devices (Students) Agreement

The person whose name and signature appear below has read and accepts the responsibilities laid out within this document regarding the loan of a computing device owned by The School of Coding. A copy of this document is to be retained by the student’s parents/guardians.

The computing device provided is NOT covered by any insurance policy, so special care needs to be taken in looking after the device. The School of Coding will not be liable for any faults, repairs or damage where the device has not been properly looked after in accordance with this agreement or the manufacturer’s guidelines.

In receiving the computing device on loan from the School of Coding, the person to whom it is lent agrees:

To take all reasonable care for its security from damage and theft (e.g. it will not be left in an unlocked classroom) and will be stored out of sight whilst travelling to and from School of Coding premises.
To be responsible for resolving any repairs or software licence issues arising for the duration of the loan.
To take responsibility for knowing at all times where the computing device is.
To bear herself/himself any costs arising from connection to the Internet.
To return the device including power adaptors, case and any other peripherals/accessories loaned with the device when requested, to the School of Coding and in any case before leaving the School of Coding.
The School of Coding will NOT maintain the computing device or repair faults not covered by the warranty (if applicable).
In the event of accidental damage to the device or loss due to theft etc. to bear the cost of repair or replacement

This page was last updated on 19/01/2023