"People and organisations will have full confidence that their information and data is being treated responsibly, securely and ethically, in line with appropriate Information and Records Management legislation and by following industry best practice around Information Management and Security"
Principles:
- All employees will have appropriate training in the following areas:
- Cyber Security.
- Information Compliance.
- Specific roles-based system training.
- Employees will have a clear understanding of how long we should hold information and data, and how we should dispose or preserve it when it no longer has a business use.
- Employees will have confidence in appropriately sharing information with other services and partners.
Awareness and Skills actions
| No. | Action |
|---|
| 1 |
Continue the conversation with key employees across the organisation around information and data as a key enabler of effective service delivery. Support this with mandatory Data Protection and cyber security training for all employees, tailored to the detail and complexity required by role. |
| 2 |
Increase awareness across the organisation of the process flow for the archiving and preservation of both physical and digital records. |
| 3 |
Enhance our ability to provide practical support and advice to managers across the organisation to encourage them to be confident in their use of data to improve the quality and impact of the services they deliver. |
| 4 |
Continue to work with partners to maintain a proactive and best practice approach to securing our information and data. |