Information Security Policy Framework

Information is vital for the operation of the council. It is part of everything we do in our work. Under law and best practice it is essential that we keep this information secure. There are three principles that underpin information security: 

• Confidentiality - It is our duty to prevent unauthorized disclosure of information. This can take the form of accidental disclosures, but can be the deliberate release of sensitive information to a third party for gain or spite.
• Integrity - Information must be protected from unauthorized modification or amendment and checked regularly for accuracy and how current it is.
• Availability - To allow the council to perform its functions efficiently and to the best of its ability the information must be available when required.

To safeguard the council's information, the Information Security team has developed an Information Security Management System housing documents and procedures that cover the breadth of information security. To maintain security it is essential that ALL employees read and agree to the Acceptable Use Policy (SharePoint) and take the IT Security E-Learning course.

iLearn Information Security and Data Protection Course

Report a breach or a cyber security incident

Digital Footprint

A digital footprint is the data that's left behind whenever a person uses a digital service, or someone posts information about that person onto a digital forum, such as a social network. Everyone is likely to have a digital footprint, and this is normal. Online activities such as photo sharing, dating, banking, shopping, gaming, professional networking and social networking all add to someone's digital footprint. Others can contribute to an individual's digital footprint by posting photographs or information about them online.

National Protective Security Authority (NPSA) help you to understand how sharing your personal information can affect you and the Council. Employees who have privileged access to sites, information or assets, need to be vigilant as their digital footprints could be of particular interest to those with malicious intent, such as criminals, violent protest groups and terrorist groups. Some vulnerabilities can be obvious, such as posting or sharing confidential organisational information that puts employees, processes or assets at risk. Others may be less so, such as search engines storing search history or smart phones tracking geolocation data which may be exploited by those with malicious intent. 

For further details - My Digital Footprint - a brief guide. (SharePoint)

Information Security Management System Policies

The Information Security Management System and associated policies apply to all permanent and temporary employees, elected members, contracted employees, contractors and third parties working for and on behalf of the council that have, or are likely to have, access to council premises and information processing systems either on-site or remotely.

The following documents are held on SharePoint: