The Head Teacher will issue disciplinary sanctions to the pupil or member of staff, in accordance with the processes outlined in the safety Policy. The data controller will work with the third-party provider to provide an appropriate response to the attack, including any in-house changes. Any further action which could be taken to recover lost or damaged data will be identified this includes the physical recovery of data, as well as – the use of back-ups. Where the security risk is high, the school will establish what steps need to be taken to prevent further data loss which will require support from various school departments and staff. This action will include: Informing relevant staff of their roles and responsibilities in areas of the containment process. Taking systems offline. Retrieving any lost, stolen or otherwise unaccounted for data. Restricting access to systems entirely or to a small group. Backing up all existing data and storing it in a safe location. Reviewing basic security, including: Changing passwords and login details on electronic equipment. Ensuring access to places where electronic or hard data is kept is monitored and requires authorisation. appropriate, e.g. if offences have been committed under the Computer Misuse Act 1990, the data controller will inform the police of the security breach. The data controller will test all systems to ensure they are functioning normally, and the incident will only be deemed when it has been ‘resolved’ assured that the school’s systems are safe to use. Assessment of risks The following questions will be considered by the data controller in order to fully and effectively assess the risks that the security breach has brought, and to help take the next appropriate steps. All relevant questions will be clearly and fully answered in the data controller’s report and records: What type and how much data is involved?
The Head Teacher will issue disciplinary sanctions to the pupil or member of staff, in accordance with the processes outlined in the Policy. The data controller will work with the third-party provider to provide an appropriate response to the attack, including any in-house changes. Any further action which could be taken to recover lost or damaged data will be identified – this includes the physical recovery of data, as well as the use of back-ups. Where the security risk is high, the school will establish what steps need to be taken to prevent further data loss which will require support from various school departments and staff. This action will include: Informing relevant staff of their roles and responsibilities in areas of the containment process. Taking systems offline. Retrieving any lost, stolen or otherwise unaccounted for data. Restricting access to systems entirely or to a small group. Backing up all existing data and storing it in a safe location. Reviewing basic security, including: Changing passwords and login details on electronic equipment. Ensuring access to places where electronic or hard data is kept is monitored and requires authorisation. appropriate, e.g. if offences have been committed under the Computer Misuse Act 1990, the data controller will inform the police of the security breach. The data controller will test all systems to ensure they are functioning normally, and the incident will only be deemed ‘resolved’ when it has been assured that the school’s systems are safe to use. Assessment of risks The following questions will be considered by the data controller in order to fully and effectively assess the risks that the security breach has brought, and to help take the next appropriate steps. All relevant questions will be clearly and fully answered in the data controller’s report and records: What type and how much data is involved? safety
Data-Security-Breach-Prevention-and-Management-Plan.docx