Training & awareness All staff will receive data handling awareness / data protection training and will be made aware of their responsibilities, as described in this policy through: Induction training for new staff Staff meetings / briefings / Inset Day to day support and guidance from Information Asset Owners (Risk Assessments Information risk assessments will be carried out by Information Asset Owners to establish the security measures already in place and whether they are the most appropriate and cost effective. The risk assessment will involve: Recognising the that are present; Judging the of the risks (both the likelihood and consequences); and Prioritising the risks. Risk assessments are an ongoing process and should result in the completion of an Information Risk Actions Form (example below): Overall risk Protective Information Information level (low, Action(s) to Risk ID Marking Likelihood Asset affected Asset Owner medium, minimise risk (Impact Level) high) Impact Levels and protective marking Government Protective Marking Scheme Impact (IL) Applies to schools? label Not Protectively Marked 0 Protect 1 or 2 Will apply in schools Restricted 3 Confidential 4 Highly Confidential 5 Will not apply in schools Top Secret 6 The school will ensure that all school staff, independent contractors working for it, and delivery partners, comply with restrictions applying to the access to, handling and storage of data classified as Protect, Restricted or higher. Unmarked material is considered The term ‘unclassified’.
Training & awareness All staff will receive data handling awareness / data protection training and will be made aware of their responsibilities, as described in this policy through: Induction training for new staff Staff meetings / briefings / Inset Day to day support and guidance from Information Asset Owners (Risk Assessments Information risk assessments will be carried out by Information Asset Owners to establish the security measures already in place and whether they are the most appropriate and cost effective. The risk assessment will involve: Recognising the that are present; Judging the of the risks (both the likelihood and consequences); and Prioritising the risks. Risk assessments are an ongoing process and should result in the completion of an Information Risk Actions Form (example below): Risk ID Information Asset affected Information Asset Owner Protective Marking (Impact Level) Likelihood Overall risk level (low, medium, high) Action(s) to minimise risk Impact Levels and protective marking Government Protective Marking Scheme label Impact (IL) Applies to schools? Not Protectively Marked 0 Will apply in schools Protect 1 or 2 Restricted 3 Confidential 4 Will not apply in schools Highly Confidential 5 Top Secret 6 The school will ensure that all school staff, independent contractors working for it, and delivery partners, comply with restrictions applying to the access to, handling and storage of data classified as Protect, Restricted or higher. Unmarked material is considered ‘unclassified’. The term
online-safety-policy.docx