Define the service context
Agree the hosting, data location and system boundaries that apply to your setup.
Security and privacy
Security, privacy and operational trust
Your team needs clear answers about where information is held, who can access it and how responsibilities are shared. Security and privacy requirements should be considered in the context of your configured service and the responsibilities shared by your team and ISH.
We discuss data handling, hosting, access controls, recovery arrangements and the assurance evidence relevant to your proposed use of onCourse.
Technical controls and service responsibilities depend on the agreed configuration. Ask us for current evidence and the details that apply to your implementation.
What this helps your team do
- Hosting and data location
- Access controls
- Authentication options
- Data handling
- Backup and recovery
- Service responsibilities
- Payment handling
- Assurance information
Shared service responsibilities
People
- Users
- Responsibilities
Access and data
- Authentication
- Permissions
- Handling
Managed cloud service
Your organisation’s setup. A platform that keeps improving.
ISH already operates and maintains onCourse. We set up your organisation, help your team get started and keep the platform running and improving, while your settings and workflows stay your own. onCourse is delivered as a managed cloud service on AWS, with customer data stored in Australia.
Your organisation’s setup
Your courses, users and workflows are configured for the way your organisation works.
A platform that keeps improving
Each customer keeps their own settings and workflows while the shared platform continues to improve.
What we look after
- Hosting on AWS in Australia
- Platform operation, maintenance and improvements
- Support with your agreed setup
What you control
- Your courses and classes
- Your authorised users
- Your organisation’s settings and workflows
Agree access responsibilities
Review available authentication and access controls, then define how your organisation will manage users and permissions.
Review continuity arrangements
Discuss backup, recovery, support and escalation responsibilities for the proposed service.
Use current evidence
Request the technical and assurance information relevant to your review rather than relying on broad claims.
Explore how it works
Follow practical tasks for the work your team needs to complete, with links to the full official onCourse handbook articles.
- Help & guidesReview your login protectionsSet clear rules for access to onCourse. Review password, inactive-account and two-factor authentication settings alongside the users who can sign in. (opens the onCourse manual in a new tab)
- Help & guidesGive people the right permissionsShape access around the work each person needs to do. Review the available roles and permissions, then configure suitable access for your team. (opens the onCourse manual in a new tab)
- Help & guidesAdd a second check at loginStrengthen access to your onCourse account. Set up two-factor authentication so signing in requires a verification code as well as a password. (opens the onCourse manual in a new tab)
- Help & guidesTrace activity in your recordsFind out who changed a record and when. Use audit logs to review recorded activity and investigate relevant errors, within your configured history and access settings. (opens the onCourse manual in a new tab)