Ledger 14: Security controls for student data
The controls that make a privacy promise real: access, authentication, encryption, logging, and the people who hold the keys.
The ledger guide
Working guides on this ledger
Security controls for student data Access Control for Student Record Systems A plain-language guide to access control for student record systems: the record, the purpose, the authority and the safeguard. Security controls for student data Device Security for Staff Laptops and Phones A plain-language guide to device security for staff laptops and phones: the record, the purpose, the authority and the safeguard. Security controls for student data Encryption for Records at Rest and in Transit Encryption for Records at Rest and in Transit: what it means for a student record system, who may use it, and the check to make before it moves. Security controls for student data Incident Detection Before the Breach A plain-language guide to incident detection before the breach: the record, the purpose, the authority and the safeguard. Security controls for student data Insider Access to Student Records Insider Access to Student Records explained for colleges: the rule, the exceptions, and the record an institution should keep. Security controls for student data Least Privilege in Registrar and Advising Offices Least Privilege in Registrar and Advising Offices: what it means for a student record system, who may use it, and the check to make before it moves. Security controls for student data Logging and Monitoring Student Data Access Logging and Monitoring Student Data Access explained for colleges: the rule, the exceptions, and the record an institution should keep. Security controls for student data Network Segmentation for Student Systems A plain-language guide to network segmentation for student systems: the record, the purpose, the authority and the safeguard. Security controls for student data Passwords, Passkeys and Student Accounts Passwords, Passkeys and Student Accounts: what it means for a student record system, who may use it, and the check to make before it moves. Security controls for student data Patching and Vulnerability Management for EdTech Patching and Vulnerability Management for EdTech explained for colleges: the rule, the exceptions, and the record an institution should keep. Security controls for student data Phishing and Social Engineering Against Colleges A plain-language guide to phishing and social engineering against colleges: the record, the purpose, the authority and the safeguard. Security controls for student data Security Assessments and Penetration Testing Security Assessments and Penetration Testing: what it means for a student record system, who may use it, and the check to make before it moves. Security controls for student data Security Baselines for New Systems Security Baselines for New Systems explained for colleges: the rule, the exceptions, and the record an institution should keep. Security controls for student data Security for Remote and Hybrid Staff Security for Remote and Hybrid Staff: what it means for a student record system, who may use it, and the check to make before it moves. Security controls for student data Security Training for Staff Handling Records A plain-language guide to security training for staff handling records: the record, the purpose, the authority and the safeguard. Security controls for student data Third-Party Access Reviews A plain-language guide to third-party access reviews: the record, the purpose, the authority and the safeguard. Security controls for student data When Security Controls and Privacy Rules Conflict When Security Controls and Privacy Rules Conflict explained for colleges: the rule, the exceptions, and the record an institution should keep.