Unfortunately an unexpected error has occurred and the process could not continue. Please click here to return to the login page.
If this problem persists please contact the ELCAS helpdesk, providing details of the action that you were undertaking prior to the error, along with the error code 404.
Please locate the document that you wish to upload by clicking on the choose file button below:
Introduction
1.
This document constitutes the Security Operating Procedures (SyOPs) for the ELCAS Portal. They are issued by the ELCAS System Security Officer in accordance with Ministry of Defence (MOD) Departmental Security Regulations. All personnel using the ELCAS Portal are to read, understand and comply with these SyOPs and no departure from or amendment to them is permitted without authorisation from the Security Authority (MOD (Training, Education, Skills, Recruitment and Resettlement (TESRR)).
2.
Disciplinary action or legal action may be taken against individuals who breach or ignore these orders. Any incident that has, or is likely, to compromise the security of the ELCAS Portal is to be reported immediately to the ELCAS System Security Officer.
Contact Details
Telephone Number: 0845 3005179 (UK)
Telephone Number: 0044 191 442 8196 (Overseas)
Email: elcas@m-assessment.com
Scope
3.
The ELCAS Portal is a controlled area accessible only to authorised users and may be used for the mechanisms:
Acceptable Use
4.
All ELCAS Portal Users are to comply with the MOD's Acceptable Use Policy. In summary Users are not to:
Roles and Responsibilities
5.
The roles and responsibilities of the ELCAS Portal are detailed below:
Account Creation and Password Controls
6.
Approved Learning Provider Accounts are created by ELCAS Administration Staff.
7.
ES/SSR and MOD Official accounts are created by ELCAS Administration Staff.
8.
Claimant Accounts are issued by Authorised ES.
9.
Passwords are not to be shared with anyone or written down anywhere under any circumstances.
10.
Users must not access the ELCAS Portal using another user's login details.
11.
12.
Password resets are initiated by the user from the logon screen using the "password reset" button.
Delegating Access
13.
Access may be delegated to another appropriate user in order to enable continuity during periods of extended absence in line with the approved process.
Monitoring/Auditing
14.
Use of the ELCAS Portal may be subject to monitoring. Users are advised that system logs can be checked on a regular basis in order to detect unauthorised or suspicious system and security events.
15.
ELCAS administrators have the right to gain access to user accounts in case of an emergency or a legitimate legal/business requirement. A detailed request is to be provided by the requestor of exactly what they are requesting access to and for what purpose. This must be recorded for audit purposes. Once the access is granted the extraction of information must be carried out within legal guidelines and a 2 man rule must be followed 2/3. Dependant on the circumstances, all reasonable attempts will be made to inform the ELCAS user of the request to access their account. Access to their account is to be conducted by the delegated authority given by the system owner.
16.
Anyone suspected of breaching the Acceptable Use Policy or detected misusing their privileges through monitoring may have their account suspended. They may additionally be subject to disciplinary or even legal action 3.
1 Telecommunications (Lawful Business Practice Regulations) (Interception of Communications) Regulations 2000
2 Data Protection Act 2018
3 https://www.gov.uk/government/publications/acceptable-use-policy-jsp-740