'The Missing Link' Security

Security is our number 1 priority.

Every effort is made to protect the security of information at 'The Missing Link'.

It is important that a school has processes in place to inform staff of common cyber security threats. (eg:Phishing, Malware, Weak passwords, Public Wi-Fi exploits, Social engineering.)

What are the security features of 'The Missing Link'?

Key features include:

• Data is stored in a commercial database. The same database structure is used by many major international companies.
• Data is managed and presented using international standards.
• Data and website are hosted by reputable providers in secure data centres..
• Users have a unique user name and password. Password strength is enforced.
• Passwords are hashed when they are stored. This means they are stored in a format such as $2y$10$Uzk5fDJ71bpHZplNPWrLcuCHkPz
• Users and data are referred to by their unique UUID which is stored in a format such as 5443b10g-a61e-13ef-af71-8c66e6c6adea
• Information such as comments for absences and appraisals are encrypted and would read such as AtSpxNecatc1cN+aXHw2fqtQKA95TkQuDicuBAclJG0=
• A user with 5 failed attempts to log on is blocked and needs to be reset by the administrator. The number of attempts is up to the school.
• All user logon attempts are recorded.
• All user input is validated and sanitized to prevent injection attacks, such as SQL Injection
• Role-Based Access Control (RBAC) is implemented. Menu items are individualised for each user group. Users can only navigate to pages they should.
• All web pages have an additional and independent security check to only allow a user who has rights to that page.
• The Missing Link uses HTTPS (Hypertext Transfer Protocol Secure), which ensures that all data transmitted between the user’s browser and the server is encrypted using TLS (Transport Layer Security).
• Multi Factor Authentication (MFA) is manditory.