# data[].attributes.body
[Group C2]

Can cause undue distress to students not only within the school but in society when any how spread

Sensitive information may be used for blackmail/further scams to make them more 'believable' - big problem when such sensitive information ends up on social media - not sure who will get access to it at the end of the day

# data[].attributes.body
Group A2

May lead to bullying

Discrimination

Breach of security that may lead to safety issue of the victim or scam

Victim may feel exposed and lost of trust

# data[].attributes.body
B4: if we notice any unattended colleague's laptops or phones, we can help to look after them or lock the devices. If we notice any colleagues who are not handling information appropriately, we can remind them of the correct way to handle matters. If we notice colleagues dealing with an emergency situation, we can step in to help since it will be difficult to remember such details in a tight situation.

# data[].attributes.body
Group A3

For Individual

1. Do not store classified and sensitive information on personal devices and on unsecured cloud storage.

2. Utilise hardcopies when required. Documents should be shredded before disposal.

3. Refer to SCMobile for students' contact and health details.

4. Password protect all documents containing classified and sensitive information.

As a School

1. Educate staff on the proper labelling, storage and sharing of classified and sensitive information.

2. Sharing of classified and sesnitive information over secured channels, eg. S Drive, CES.

# data[].attributes.body
Group B2

Medical Record Classification : Restricted Sensitive (High)

1. Cause undue stress to students

2. Loss of trust from stakeholders(students, parents, public ext)

# data[].attributes.body
C1:

1. Sharing of information via unsecured platforms such as WhatsApp, etc.

2. Not closing sensitive information documents before entering the class.

3. Storing of classified information in personal or unsecured devices.

Plausible solutions:

1. Share medical information through phone call ( verbally) privately.

2. Ensure all sensitive folders are closed before entering the class.

3. To save classified or sensitive informations in secured platforms or devices as communicated by ministry.

# data[].attributes.body
Group B3:

i) As individuals

All staff should have access to classified information. Therefore, we do not need to share it (Confidential & restricted information should never be shared)

If Form Teacher is not available (eg. having lesson), Science teacher can contact Year Head/SLs

ii) As a school:

Sharing of protocols with the staff

Educating the staff on what is considered as classified

# data[].attributes.body
Group A1:

1. Miss X should not send medical information via WhatsApp. She could have given the science teacher a phone call to inform him/her on the medical history of student Y.

2. Medical information should not be saved on personal devices as they are confidential. Medical information for our form class/CCA can be accessed on SC mobile under Health.

3. Miss X should make sure programmes with sensitive information on her laptop is closed before allowing students to connect to projector.

# data[].attributes.body
[Group C4]

Friendly reminder to colleagues to:

-lock your laptop when unattended

-not transfer any sensitive information to personal devices

-dispose hard copy sensitive information properly (eg: shred, place a shredder beside printer)

-dissemination of private info through corporate channels like CES.

# data[].attributes.body
Group C3

1. Individually, we need to be mindful of the data classification and the SOP involving them. Avoid sharing, transferring and storing sensitive information on personal devices (e.g., laptops, handphones).

2. As a school, staff can be engaged at various platforms to be refreshed on the data classification and to adapt good data hygiene. Clear SOP should be disseminated to staff to ensure ease in retrieval and access for the right course of action.

# data[].attributes.body
Group B1

Q1.

-Instead of taking a screenshot and send via WA, Ms X could have accessed SC mobile’s “Health” component on a needs basis.

-To double check that all other windows e.g. WA web to be closed before projecting onto screen.

-Should not have taken photos of class list of student particulars and medical information.