Easier to read with cream paper, a tint, more contrast or larger text? Choose your colours and text, once, for every page.

Preview

Unit 3 C2: Security policies and procedures staff follow

This is the first page of the lesson. Read it and have a go at the activities. The rest is in the full lesson.

50 minutes

The first day at work

On her first day at a made-up estate agent, Tia gets a short document to read and sign. It says what she may do on the computers and what she must never do.

Why does a company bother? Because rules written down, read and agreed beat rules that people only guess. This lesson is about those documents.

By the end of this lesson

Note

I can describe four common IT policies and say what each one is for.

Key words

WordWhat it means
Policya written rule an organisation expects people to follow
Procedurethe steps to follow to carry out a policy
Acceptable use policyrules on how staff may use IT
Disaster recoverya plan to get systems working again after a serious problem
Backupa spare copy of your data in another place
Personal datafacts about a living person who can be identified
Malwaresoftware made to cause harm
Compliancefollowing the law and the rules

The cells students fill in are left blank in this preview.

Starter: what you already know

Have a go

Starter: what you already know

3 questions
Have a go: your answers are marked here and then forgotten. Sign in if you would like your score kept, and to pick up where you left off.Sign in to keep your score

Your answers are marked here and are not kept. A college account keeps every student’s marks.

An acceptable use policy sets the rules

An acceptable use policy says how staff may use IT. It usually covers four things.

Internet and email: what is allowed and what is not, such as not opening unknown attachments. Security and passwords: how strong they must be, and that they are never shared. Staff duties: what each person must do and report. Training: staff learn the rules when they start and again each year. Each organisation writes its own, so names and contents differ.

Parts of an acceptable use policy

PartExample ruleWhy
Internet and emailNo unknown attachments, no private streaming at workReduces malware and wasted time
PasswordsLong passwords, never shared, changed if leakedStops misuse of accounts
Staff dutiesLock the screen, report lost devices at onceMakes everyone part of security
TrainingA short course on starting and every yearThreats change, so people must keep up

The cells students fill in are left blank in this preview.

Check

Have a go

Check

3 questions
Have a go: your answers are marked here and then forgotten. Sign in if you would like your score kept, and to pick up where you left off.Sign in to keep your score

Your answers are marked here and are not kept. A college account keeps every student’s marks.

The lesson goes on

7 more parts of this lesson are in the full lesson, which colleges teach from the Library. A college account gives your students all of it.