|
19 | 19 |
|
20 | 20 | ## Overview |
21 | 21 |
|
22 | | -**MRCA (Moodle Risk & Compliance Analyzer)** is a local Moodle plugin that performs automated security, privacy, and compliance audits of your Moodle installation. It scans installed third-party plugins across multiple risk dimensions and produces a unified **Site Risk Index (0–100)**. |
| 22 | +**MRCA (Risk & Compliance Analyzer for Moodle™)** is a local Moodle™ plugin that performs automated security, privacy, and compliance audits of your Moodle™ installation. It scans installed third-party plugins across multiple risk dimensions and produces a unified **Site Risk Index (0–100)**. |
23 | 23 |
|
24 | | -By default, MRCA only scans **third-party plugins**. Standard Moodle modules (maintained by Moodle HQ) are excluded to avoid false positives. |
| 24 | +By default, MRCA only scans **third-party plugins**. Standard Moodle™ modules (maintained by Moodle HQ) are excluded to avoid false positives. |
25 | 25 |
|
26 | 26 | --- |
27 | 27 |
|
28 | 28 | ## Why MRCA? |
29 | 29 |
|
30 | | -Moodle is the most widely adopted LMS in the world, used by over 300 million users across 240+ countries. In the **European Union**, where **GDPR (General Data Protection Regulation)** has been fully enforceable since May 2018, educational institutions face strict obligations regarding the processing of personal data — including student records, grades, attendance, and communication logs. |
| 30 | +Moodle™ is the most widely adopted LMS in the world, used by over 300 million users across 240+ countries. In the **European Union**, where **GDPR (General Data Protection Regulation)** has been fully enforceable since May 2018, educational institutions face strict obligations regarding the processing of personal data — including student records, grades, attendance, and communication logs. |
31 | 31 |
|
32 | | -Despite this, Moodle provides **no built-in mechanism** to audit installed plugins for: |
| 32 | +Despite this, Moodle™ provides **no built-in mechanism** to audit installed plugins for: |
33 | 33 |
|
34 | 34 | - **Privacy compliance** — Does the plugin declare what personal data it stores? |
35 | 35 | - **Security risks** — Does it use unsafe PHP functions or deprecated APIs? |
@@ -310,7 +310,7 @@ If [Integration Hub for Moodle™](https://github.com/x-name15/moodle-local_inte |
310 | 310 |
|
311 | 311 | ## Privacy & GDPR |
312 | 312 |
|
313 | | -MRCA implements the **Moodle Privacy API** (`\core_privacy\local\metadata\provider`): |
| 313 | +MRCA implements the **Moodle™ Privacy API** (`\core_privacy\local\metadata\provider`): |
314 | 314 |
|
315 | 315 | - **Data stored:** Only the `userid` of administrators who whitelist fields (`local_mrca_whitelist` table). |
316 | 316 | - **Export:** Whitelist entries are exported via Moodle's privacy tools. |
|
0 commit comments