"Implementation of hte

1. Provincial Approach to Student Information (PASI) JTC Conference 4825 Mount Royal College Calgary, AB Thursday, May 5, 2011 (2:15 – 3:15 PM; Room 75; fv) by: Alec Campbell, PASI Privacy Lead & John Myroon, PASI Communications Lead

2. Agenda PASI current status and upcoming plans PASI Usage Agreement Boiler Plate security policy SIS vendor update Q’s & A’s 2

3. PASI Current Status & Plans 3

4. September 2010: Current State School Authorities Ministry PASI Shared Data Repository 2 Authorities Real-time PASI-enabled Student School Enrolment Student Personal Information 400+ authorities Using PASIprep “The right information…to the right people…at the right time!” 4

5. PASI & the Student Information Roadmap April 2012 – Dec 2013 Oct 2013 – Sept 2014 April 2011 – Sept 2012 Completed PASI Phase 2 PASI Phase 3 PASI Phase 1 Extend Administrator and Student Access interface Course Mark extracts, Diploma exam registration processing; Statement of marks; Transcripts; Diplomas Course Mark Collection; Course Mark processing; Ministry credentials Student Personal information and Student School Enrolment collection & processing System Integration Projects 5

6. Roadmap High Level Timeline Phase 2– Apr 2011 to Sept 2012 PASI – Course mark collection, course mark processing, Ministry Credentials Ministry Integration Planning Phase 3 – April 2012 to Dec 2013 PASI – Course mark extracts, DER collections, statement of marks, transcripts Ministry Integration – personal information, enrolment, course marks Phase 4–Oct2013 to Sep2014 PASI – Student Information access PASI Program Ministry Integration Program Ministry legacy decommissioning Final warranty Apr 2011 Apr 2013 Apr 2015 Apr 2012 Apr 2014 6

7. PASI Phase 2 – Key dates for School Authorities April 20 – May 12 2011-Phase 2 Academic Records Requirements workshops November 2011 – Ministry-led course mark submission workshops December 2011 – Authority-led training for schools and central offices January 2012 – Begin course mark submission using PASIprep 7

9. Support teacher lesson planning

10. Support student-based instruction

11. Support potential future interoperability to other Ministry systems

12. (e.g. Children & Youth Services)Diverse learning needs Drop outs 2010 2014 8

13. PASI Usage Agreement & Boiler Plate security policy 9

14. Requirement To meet PASI FOIP obligations, each school authority must have a: Signed PASI usage agreement Reasonable security policy and procedures in place 10

15. Why a Usage Agreement? Student data now exposed beyond a single school authority boundary via PASI core, which is the responsibility of Alberta Education FOIP Act requires that parties ensure the collection, use and disclosure of personal information contained in the PASI Core is properly managed and secured 11

16. Information Security Controls PASI Usage Agreement has several components: PASI Usage Agreement body Schedule A: Minimum Security Requirements Security Policy Boilerplate (optional) School Technology Services Framework School authority security controls assessment tool 12

17. Key Requirement – Student Information Systems SIS functions and support for access control measures Ability to provide Alberta Education with SIS vendor contracts and agreements upon request 13

18. Key Requirement – Personal Information Security policies and procedures for: Collection of personal information Use and disclosure of personal information Advise Alberta Education of related breaches 14

19. Key Requirement – Audits Provide Alberta Education access to authority premise, records and computing facilities for investigation or audit purposes SIS creates and maintains audit trails and records to support investigations 15

20. Key Components - Information Security Controls Schedule A based on ISO/IEC 27001:2005 Approved information security policy Confidentiality & non-disclosure agreements Defined roles & responsibilities Security controls include any third party delivery Agreements established for exchange of information with external parties Detection, prevention and recovery controls Access control policy 16

21. Key Components - Information Security Controls Continued: Password security practices Secure operating systems Formal policy and security measure related to mobile computing and communication facilities Management responsibilities and procedures to address information security incidents Data protection and privacy reflected in polices, procedures and contractual clauses Compliance checks against security standards 17

22. PASI Usage Agreement 18

23. School Authority To-Do’s Review the draft PASI Usage Agreement to understand requirements Compare the Boilerplate security policy with your own - Are there potential improvements you can make? Ensure future SIS vendor contracts provide for required audit features and access controls Check out the “PASI Community Site” For the draft usage agreement, getting started planning & quick reference guides and security boilerplate template https://phoenix.edc.gov.ab.ca/login/default.asp 19

26. SIS Vendor Update 21

27. Vendor Status – Pilot Maplewood current plans Make application changes for year end processes Plan second pilot with a new school authority for September 2011 enrolment submission Rollout PASI-enabled enrolments to remaining school authority clients (Oct 2011 to Feb 2012) 22

28. Other SIS Vendor Activity Pearson Completed high level design; starting development Plan Conformance test for late fall 2011 Pilot enrolments starting early 2012 (Edmonton Public, Edmonton Catholic & Peace Wapiti) MIG Start design/development soon Plan to start pilot (Lethbridge #54) early 2012 Other Vendors Starting integration activities PASI receiving inquiries from new small vendors 23

29. School Authority To-Do Understand your vendor’s plans and timelines Determine your authority’s plans to become PASI-enabled (Deadline – Aug 2013) Consider your internal business cycle Consider vendor product readiness Check out the “SIS Vendor Status” On the PASI Community Site https://phoenix.edc.gov.ab.ca/login/default.asp 24

30. Questions & Answers 25

31. Questions Please email your feedback on the PASI Usage Agreement or questions before May 26, 2011 to: PASI@gov.ab.ca 26