The new online Members’ Area uses best practices from other industries.

The Ontario College of Teachers believes that the sercurity of member information is of the upmost importance, and the new online Members' Area is a prime example of that concern in action.

“The security of the data was our priority from the moment we started this project,” says Devon Stutt, manager of Information Systems at the College.

“We’ve followed best practices and we’re confident that when users share information with the College in this online environment, no one else will be able to see, change or monitor it when it is sent to the College.”

It would be imprudent to describe exactly how this high level of security is achieved, but Stutt says the most proven technologies and precautions are being employed, “This is not a case of data flying around cyberspace unprotected. We’ve created a very sophisticated system for transferring information.”

The security system takes advantage of 128-bit encryption technology, the highest level of protection available for data sharing across the Internet, and requires members to use browsers that accept that high level of security. The latest Microsoft (www.microsoft.com/windows/ie) and Netscape (browsers.netscape.com) browsers both employ this technology and are available for free at their web sites.

The College has struck a balance of convenience and security by requiring members to provide their College registration number and their Social Insurance Number when they register. At registration they choose a password, required for signing in, and a secret question which is used to confirm a user’s identity if they forget their password. This strategy conforms to common web practices.

Of course the Members’ Area is only as secure as users’ sign-in information and members should be aware that in any online transaction, some responsibility must be borne by both parties. The College recommends that any member concerned about security should be careful to use a computer used only by people the member knows and trusts. If you’re not aware of all the software installed on a particular machine, look for another one to use. The College, understandably, cannot be responsible for any security issues having to do with the computers members use at home or elsewhere.

Members should also be careful to choose passwords that would be difficult for anyone to guess.

   back | next