+27 (82) 788-4823 info@bronbergnursing.co.za
Bronberg Learner Management System (LMS) Security and Data Protection Policy

1. Introduction

At Bronberg Nurse Education and Training College, we are committed to maintaining the integrity, confidentiality, and availability of data within the Bronberg Learner Management System (LMS). This policy outlines the security measures we currently practice concerning data protection, authentication, authorization, and data backup.

2. Scope

This policy applies to all users of the Bronberg LMS, including students, faculty, administrators, and third-party service providers.

3. Data Protection

3.1 Compliance

  • The LMS complies with relevant data protection laws, including South Africa’s Protection of Personal Information Act (POPIA).

  • Personal and academic data are collected, stored, and processed strictly for educational and administrative purposes.

3.2 Data Confidentiality and Integrity

  • Personal and sensitive information is encrypted both in transit and at rest.

  • Role-based access control (RBAC) is implemented to ensure that data access is limited to authorized individuals.

  • User activity logs are maintained to monitor data access and modifications.

3.3 Data Retention and Disposal

  • Academic records are retained as per institutional and legal guidelines.

  • Data that is no longer needed is securely deleted or anonymized.

4. Authentication and Authorization Security

4.1 User Authentication

  • All users authenticate using secure credentials (e.g., username and strong password).

  • Multi-Factor Authentication (MFA) is implemented for administrators and faculty members with elevated access.

4.2 Authorization and Access Control

  • Access is granted based on user roles (e.g., student, lecturer, administrator).

  • Faculty and administrators only have access to the data necessary for their roles.

  • Regular audits are conducted to review and revoke unnecessary permissions.

4.3 Password Policy

  • Passwords are required to be at least 12 characters long and include uppercase letters, lowercase letters, numbers, and special characters.

  • Users change their passwords every 90 days.

  • Repeated failed login attempts result in temporary account suspension.

5. Data Backup and Recovery

5.1 Backup Procedures

  • The LMS database and files are backed up daily and stored securely in an encrypted format.

  • Backups are stored in both on-premise and cloud storage solutions to ensure redundancy.

5.2 Disaster Recovery Plan

  • A disaster recovery plan is in place, detailing steps to restore LMS operations in case of system failure or data breach.

  • Regular recovery tests are conducted to ensure backups remain functional.

5.3 Incident Response

  • Security incidents, such as data breaches, are reported immediately to the IT department.

  • Affected users are notified in case of a data breach.

6. User Responsibilities

  • Users are responsible for protecting their login credentials and reporting suspicious activity.

  • Unauthorized sharing of LMS data is strictly prohibited.

  • Users comply with institutional policies regarding data security and privacy.

7. Enforcement and Review

  • Non-compliance with these practices may result in disciplinary action.

  • This policy is reviewed annually and updated as necessary to align with technological and regulatory changes.