Breaches 8.1 The ICT Service Desk has primary responsibility for ensuring all devices procured on behalf of SECSU members of staff or those of the organisations it supports are encrypted to the standards set out in this policy. 8.2 If any staff have concerns or questions regarding the encryption of their device, they should raise a call in the first instance with the SECSU ICT Service Desk. 8.3 In the case of the loss, theft or damage of a mobile device containing SECSU data, the owner should immediately escalate the issue to the Head of Service Desk or Head of Server and Security as per the details provided in the SECSU’s escalation process contained within Response to “Management a Major Incident” procedure. 8.4 Any devices returned to the SECSU following a loss of theft must be reported to the ICT Service Desk and returned as instructed for checking and reconfiguration, as necessary. Storage on SECSU Devices 9.1 The Network drives are for the storage of clinical and corporate data by authorised personnel only. No information should be stored on local drives (C:drives). 9.2 No personal information, including photographs, videos, music etc. shall be stored on the SECSU Network or local drives. Monitoring of policy compliance Compliance Compliance with this policy will be monitored through the ICT Security which reports to the ICT Steering Group. Non compliance 10.2.1 Failure to comply with the standards and appropriate governance of information as detailed in this policy may result in disciplinary action. All staff are reminded that this policy covers several aspects of legal compliance that as individuals they are responsible for. 10.2.2 Failure to maintain these standards can result in HR disciplinary processes being followed which could result in criminal proceedings against individuals or the organisation.
Breaches 8.1 The ICT Service Desk has primary responsibility for ensuring all devices procured on behalf of SECSU members of staff or those of the organisations it supports are encrypted to the standards set out in this policy. 8.2 If any staff have concerns or questions regarding the encryption of their device, they should raise a call in the first instance with the SECSU ICT Service Desk. 8.3 In the case of the loss, theft or damage of a mobile device containing SECSU data, the owner should immediately escalate the issue to the Head of Service Desk or Head of Server and Security as per the details provided in the SECSU’s escalation process contained within “Management Response to a Major Incident” procedure. 8.4 Any devices returned to the SECSU following a loss of theft must be reported to the ICT Service Desk and returned as instructed for checking and reconfiguration, as necessary. Storage on SECSU Devices 9.1 The Network drives are for the storage of clinical and corporate data by authorised personnel only. No information should be stored on local drives (C:drives). 9.2 No personal information, including photographs, videos, music etc. shall be stored on the SECSU Network or local drives. Monitoring of policy compliance Compliance Compliance with this policy will be monitored through the ICT Security which reports to the ICT Steering Group. Non compliance 10.2.1 Failure to comply with the standards and appropriate governance of information as detailed in this policy may result in disciplinary action. All staff are reminded that this policy covers several aspects of legal compliance that as individuals they are responsible for. 10.2.2 Failure to maintain these standards can result in HR disciplinary processes being followed which could result in criminal proceedings against individuals or the organisation.
SECSU%20Device%20Encryption%20Policy%20v4.0%20(1).docx