Let me preface this with the fact that this is not a solely computer related post

I have recently been approached to potentially help implement a new security system/set of policies for a local private school. The only problem is I have no idea where to actually start. I have a ton of ideas but not sure where to start. They are getting a fairly good sized grant to make the school safer. I'm basically wanting to bounce some ideas around and see what everyone thinks. Also if you have any suggestions please do not hesitate to speak up. This is a K through 12.

Here is what I am thinking, please bear in mind this is a very simplified version of what I am planning on recommending.

1. access controlled doors. Monitored by school personnel during periods when kids are coming and going. Locked during non-essential times so as to not be operable from the outside.

2. Door bell cameras with recording system and a remote door activation switch next to the camera monitor. So the office can open the door remotely if the person at the door is recognized as someone who is allowed to be there. This step could use a little work and some more definition I know. Like I said this is basics.

3. Im not sure at this point how feasible this part is but I would like to see the computer with the student database and other sensitive material isolated from the internet. Possibly not hooked into the rest of the network. This is a relatively small school so they do not use the network for grade reporting or anything like that. That could all be handled by a small in house email set up with only a slight modification to the way they currently do things.

4. An AUP that all parents are to insure that their children understand. That way it is understood what exactly the classroom computers are to be used for and what is not acceptable. The kids have internet access for research purposes but I am concerned about possible infection from spy ware because of some kid surfing the wrong sites. All the student accessible computers are set up for limited user accounts for the kids but better safe than sorry.

5. Potentially using content filtering software of some sort. And some sort of host blocking. So the kids cant access myspace at school and other sites like that. Having never worked with anything like that I have no clue where to even start. I'm sure part of it could be done in the hosts file on the computers.

6. Photo ID's for students and maybe even parents so that it is easier for staff to identify who is supposed to be there and who is not. And visitor badges that must be visible.


Part of this I will probably be implementing myself and some of it just sort of consulting on. Like the doors locks and such I would have no idea where to start with that so it will probably be contracted out to a local lock and alarm company. I have a contact in the schools tech department who recommended me to consult on this. The tech teacher is a great lady when it comes to teaching the kids things they need to get jobs later in life but security is not her forte. So she is wanting to bring me in to help out. I would be responsible for initial set up and training. The occasional audit of the procedures and policies would be part of it as well. Basically Pen test the schools security system. I plan on doing a lot of speaking about social engineering during my training sessions with the staff. We have not agreed on a compensation amount yet. I do not have enough details on how much they expect me to do after the initial set up and training.

I will add more as it comes to mind and if you have any suggestions I would really love to hear them.