Req 2.31: Policy Enforcement & Overrides

⚙️ Technical Demonstration

IMTLazarus incorporates an authoritative, hierarchical Policy Enforcement Architecture designed to maintain structural integrity across the DepEd device landscape. The platform features strict role-based layering to ensure global safety policies remain uncompromised across all OSes:

1) Advanced Policy Controls and Intervention Protocols: > * Internet Lockouts: Features a centralized, one-click "Lockout" mechanism. Administrators or teachers can instantly suspend internet access or lock device screens across an entire classroom or division to halt unauthorized usage immediately.

Temporary Overrides: Supports secure, time-bound override tokens. Authorized technical personnel can issue temporary bypass codes for localized troubleshooting, which automatically expire and revert to the default baseline profile once the allocated timer elapses.

Central Rule Enforcement: Ensures that core security parameters, web filtering standards, and mandatory settings are broadcast instantly over-the-air from the Central Office to all endpoints nationwide.

2) Subordinate Override Prevention: Implements a strict Role-Based Access Control (RBAC) hierarchy modeled after DepEd’s organizational structure. Top-level security baselines—including the mandatory 100+ education-curated filtering categories and Tagalog and regional dialect keyword filtering directories—are marked as Centrally Enforced Master Policies. Subordinate administrators (e.g., school-level IT coordinators) are completely restricted from deleting, disabling, or overriding these inherited master rules. Local capabilities are confined strictly to managing localized custom allowlists within boundaries permitted by the Central Office.