Recruitment Blog

Security Objective:

• Our security objective is to protect G & G from security problems that might have an adverse impact on our operations and professional standing. Security problems can include confidentiality (the wrong people obtaining information), integrity (information being altered without permission, whether deliberate or accidental) and availability (information not being available when it is required). The widest possible definition of security will be used to include all types of incident that impact the effective use of information. This includes performance, consistency, reliability, accuracy and timeliness.

Principles:

• We will use all reasonable, appropriate, practical and effective security measures to protect our important processes and assets in order to achieve our security objectives.
  
• We will continually examine ways in which we can improve our use of security measures to protect and enhance our business.
  
• As a responsible organisation, we will protect and manage our information assets to enable us to meet our contractual, legislative, privacy and ethical responsibilities. As a publicly funded organisation we are aware of the need to provide value for money.

Responsibilities:

• All employees of G & G will be responsible for protecting our information assets, systems and infrastructure. They will, at all times, act in a responsible, professional and security-aware way, according to the principles in this Policy.
  
• All G & G employees will protect information assets that are entrusted to them, whether such protection is required contractually, legally, ethically or just out of respect for other individuals or organisations.
  
• All employees of G & G are responsible for identifying security shortfalls in our existing security practices and/or improvements that could be made. These should be reported to the G & G’s Data Controller (Currently Mark Gibbons)
  
• All employees of G & G who have supervisory responsibility are expected actively to train and encourage best practice amongst their supervised staff.
  
• G & G’s Data Controller is responsible and accountable for ensuring that our security objective is achieved.
  
• The Directors will discuss at least once annually during Director meetings the Information Security policies, taking informed decisions for the benefit of the majority. They will be held responsible by The Data Controller for achieving measurable progress.
  
• The Data Controller is the guardian of all information owned by G & G, having ultimate responsibility for ensuring that it is adequately protected. The Data Controller will delegate responsibility for approving and reviewing access rights to information to named, responsible individuals.

If you have any questions or thoughts please do contact us.