A document that sets out the responsibilities of staff and the procedures they must follow to keep systems and information safe
Which term describes the organisation that decides why personal information is collected and how it may be used?
Data controller
What is the name for telling the person responsible for a policy about a problem you have noticed with the way it is being applied?
Reporting a concern
What is meant by a responsibility in an organisation's security policy?
A duty that a member of staff must carry out, such as following procedures
Who is usually responsible for putting most of an organisation's security policies into practice?
IT and technical staff
What are IT managers normally responsible for in relation to security policies?
Writing them and recommending how they should be updated
Priya thinks a security policy at her workplace is not being followed properly. What should she do?
Report it to the person named as responsible for the policy
Which task is the responsibility of an organisation's Data Protection Officer?
Making sure staff know their responsibilities under data protection law
What is expected of every member of staff in relation to the organisation's policies?
Working in line with the policies in their daily role
A new employee has just started work at an organisation. How should they be made aware of their security responsibilities?
Through induction or training that covers the organisation's policies
How are responsibilities for security policies usually shared in a large organisation?
Different policies are the responsibility of different designated employees
A supermarket chain uses the same security policies in every one of its stores. Why is this done?
So that all employees follow the same code of conduct
How might responsibility for the security policies be arranged in a smaller organisation with fewer staff?
One person may manage all of the policies
A company has changed its policy on using removable storage devices. What is the best way to make sure staff know what they must now do?
Tell staff about the change through internal communication or training
Amina is not sure whether her organisation's policy allows her to take a work laptop home. What should she do?
Ask the person named as responsible for the policy
Why does an organisation name the member of staff who is responsible for each security policy?
So that staff know who to contact about that policy
The Data Protection Officer finds that staff are handling customers' personal information in a way that does not meet the law. What is the officer responsible for doing?
Making sure the issue is put right
A team leader asks a member of staff to share their login details with a colleague, which goes against the organisation's security policy. What should the member of staff do?
Refuse to share the details and report the concern
We use cookies to enhance your experience. You can manage your preferences or learn more in our Cookie Policy.