Information Security

10. Physical security

Schools must implement physical security measures to protect school information and school ICT equipment and systems throughout their lifecycle, both within and outside school premises. This includes:

• securing ICT school systems, personal computers, and sensitive hardcopy information in locked locations with restricted access
• monitoring and controlling visitor entry to school premises, especially in areas with ICT infrastructure and records storage
• implementing secure printing processes requiring user authorisation
• encouraging staff to practice secure behaviours (locking devices, clearing desks, wearing identity badges)
• establishing processes for implanting and managing physical security measures including the maintenance and repairs of door locks, secure storage (bins, filing cabinets) and fire extinguishers.

When handling information outside the school premises, schools must ensure staff, volunteers and other parties understand their information security obligations including when working remotely, travelling and sharing information with third parties.

In addition to this Information Security policy, when managing physical access to school information and ICT systems, schools must follow the:

• Records Management policy
• Visitors in Schools policy
• Crime Prevention in Schools policy.