Who may read the wages file?
A new worker in a care firm finds the wages file open on a shared drive. She reads it. Nobody told her not to.
Was that her fault? Without a written rule, it is hard to say.
A firm writes its rules down so everybody knows them.
By the end of this lesson
Note
I can say what each of six data policies is for.
Key words
| Word | What it means |
|---|---|
| Policy | a written rule for the whole organisation |
| Procedure | the steps to follow to carry out a rule |
| Asset | anything of value, such as data or a device |
| Network | computers and devices joined together |
| Classification | sorting things into levels, such as public or secret |
| Personal data | information about a living person |
| Permission | the right to see or change something |
The cells students fill in are left blank in this preview.
Starter
Have a go
Starter
3 questionsYour answers are marked here and are not kept. A college account keeps every student’s marks.
Policies lower risk by setting the rules
A policy says what must happen. A procedure says the steps to do it. Together they cut risk, because people know what is allowed.
Staff who break a clear policy can be warned. Staff cannot be blamed for a rule that does not exist.
Six policies and what each is for
| Policy | What it is for |
|---|---|
| Data protection policy | Sets how data is used, watched and managed |
| Acceptable use policy | Says how the network and equipment may be used |
| Access control policy | Says how permissions are given and managed |
| Asset classification policy | Sets how strong the protection is for each kind of asset |
| Information security policy | Says how to use the network and systems safely |
| Incident response procedure | Says how the firm acts when something goes wrong |
The cells students fill in are left blank in this preview.
Check
Have a go
Check
3 questionsYour answers are marked here and are not kept. A college account keeps every student’s marks.