Appendix Audit Logging / Reporting / Incident Handling It is good practice, as recommended in the Handling Procedures in Government” document that the “Data activities of data users, in respect of electronically held personal data, will be logged and these logs will be monitored by responsible individuals. (insert name or title). The audit logs will be kept to provide evidence of accidental or deliberate data security breaches including loss of protected data or breaches of an – acceptable use policy, for example. The school has a policy for reporting, managing and recovering from information risk incidents, which establishes: (schools should determine their own reporting policy, in line with that of their LA (if relevant), and add details here) a person” for each incident; “responsible a communications plan, including escalation procedures; and results in a plan of action for rapid resolution; and a plan of action of non-recurrence and further awareness raising. All significant data protection incidents must be reported through the SIRO to the Information Commissioner’s Office upon the local incident handling policy and communication plan. Use of technologies and Protective Marking The following provides a useful guide: Notes on Protect Markings The information The technology (Impact Level) Common practice is to use Most of this information will fall publically accessible into the NOT PROTECTIVELY School terms, holidays, training technology such as school MARKED (Impact 0) days, the curriculum, websites or portal, emailed category. School life and activities, events, newsletters, subscription text events displays of pupils work, lunchtime services menus, extended services, parent consultation events
Appendix Audit Logging / Reporting / Incident Handling It is good practice, as recommended in the “Data Handling Procedures in Government” document that the activities of data users, in respect of electronically held personal data, will be logged and these logs will be monitored by responsible individuals. (insert name or title). The audit logs will be kept to provide evidence of accidental or deliberate data security breaches – including loss of protected data or breaches of an acceptable use policy, for example. The school has a policy for reporting, managing and recovering from information risk incidents, which establishes: (schools should determine their own reporting policy, in line with that of their LA (if relevant), and add details here) a “responsible person” for each incident; a communications plan, including escalation procedures; and results in a plan of action for rapid resolution; and a plan of action of non-recurrence and further awareness raising. All significant data protection incidents must be reported through the SIRO to the Information Commissioner’s Office upon the local incident handling policy and communication plan. Use of technologies and Protective Marking The following provides a useful guide: The information The technology Notes on Protect Markings (Impact Level) School life and events School terms, holidays, training days, the curriculum, activities, events, displays of pupils work, lunchtime menus, extended services, parent consultation events Common practice is to use publically accessible technology such as school websites or portal, emailed newsletters, subscription text services Most of this information will fall into the NOT PROTECTIVELY MARKED (Impact 0) category.