If No, please describe how and who within your organisation is responsible for monitoring and recording any security. 10.4 How does your company monitor staff Please insert information here with access to ICT systems to ensure any breaches of its use are identified and dealt with? 10.5 On leaving your organisation, is there a Yes process in place to ensure assets are No returned and access rights revoked? If yes, please specify 11 Incident Management blue (delete responses in as appropriate in third column) 11.1 Do you have policies in place which set out Yes how information security incidents, and No breaches to the confidentiality of data, If yes, please provide a copy should be managed and who it should be escalated to? 11.2 If unable to provide a copy please detail how you would be able to comply with the Data Protection Regulations including roles and responsibilities to achieve compliance. 11.3 Have you experienced any data breach, Yes whether reported to the ICO or not, within No the last 5 years? If so, please provide details Details of incident. 12 Business Continuity blue (delete responses in as appropriate in third column) Yes 12.1 Are you registered (certified) to any recognised Business Continuity Standard Partial for the full range of products, services and No works you provide?
If No, please describe how and who within your organisation is responsible for monitoring and recording any security. 10.4 How does your company monitor staff with access to ICT systems to ensure any breaches of its use are identified and dealt with? Please insert information here 10.5 On leaving your organisation, is there a process in place to ensure assets are returned and access rights revoked? Yes No If yes, please specify 11 Incident Management (delete responses in blue as appropriate in third column) 11.1 Do you have policies in place which set out how information security incidents, and breaches to the confidentiality of data, should be managed and who it should be escalated to? Yes No If yes, please provide a copy 11.2 If unable to provide a copy please detail how you would be able to comply with the Data Protection Regulations including roles and responsibilities to achieve compliance. 11.3 Have you experienced any data breach, whether reported to the ICO or not, within the last 5 years? If so, please provide details of incident. Yes No Details 12 Business Continuity (delete responses in blue as appropriate in third column) 12.1 Are you registered (certified) to any recognised Business Continuity Standard for the full range of products, services and works you provide? Yes Partial No
FCO-Services-Information-Management-Supplier-Declaration.docx