Frequently Asked Questions About Security
Question: How is our data secured when sent from CPS to CPSOnline? Is it encrypted?
Answer: CPS and CPSOnline use SSL encryption to ensure that all data is transmitted securely. This is the same technology used by banks and financial institutions. SSL uses what is called public key cryptography encryption. Public key encryption is a technique that uses a pair of asymmetric keys for encryption and decryption. Each pair of keys consists of a public key and a private key. The public key is made public by distributing it widely. The private key is never distributed; it is always kept secret. Data that is encrypted with the public key can be decrypted only with the private key. Conversely, data encrypted with the private key can be decrypted only with the public key. This asymmetry is the property that makes public key cryptography so useful.
Question: How is our data secured once uploaded to CPSOnline?
Answer: Our site offers complete redundancy in power, HVAC, fire suppression, network connectivity, security, drive arrays, web servers and database servers. We have multiple power grids driven by TXU electric, multiple Liebert and PowerWare UPS battery backup power, and onsite permanent generator power. Our HVAC systems are a combination of glycol, chilled water, and condenser units by Liebert and Data Aire to provide redundancy in cooling coupled with 6 managed backbone providers. Twelve third party backbone providers are available via cross connect. Fire suppression includes a pre-action dry pipe system including VESDA (very early smoke detection apparatus) along with over 600 smoke detectors. Onsite security is also a concern so we utilize key card access with CCTV for maximum security. All visitors must check in and out of the facility. The goal is to provide maximum redundancy in every facet of the datacenter environment to facilitate 100% uptime for your school’s data.
As far as data security, we have built in security from the start. Your data is never on any server that is accessible on the web. Our databases are accessible only via database specific NIC cards utilizing non-routable IP addresses. Our sites utilize a combination of hardware firewall solutions as well as multiple network separations. All security appliances feature very low latency, high throughput IPSec encryption.
Question: How is parental access to their children's data secured?
Answer: CPSOnline provides parents access only to their child's data via a secure login screen. Schools decide whether or not to offer this functionality based on their particular needs.
Question: Isn't it more secure to keep our data on-site rather than in a web-based application?
Answer: School districts and schools are in the business of teaching our children; we are in the business of managing and securing your data. Because of the continued growing threat of computer hacking, many districts and schools have a difficult time managing and/or securing the hardware, software and network issues involved in protecting the volume of data inherent in schools. CPSOnline solves this problem by being able to do what we do best, manage both the data and the application. This leaves school and district staff personnel better able to focus on student needs rather than hardware and software security.