Page 28 - Data and Digital Technology Strategy 2024-2026
P. 28
STRATEGIC PRINCIPLES STRATEGIES AND ACTIONS
SECURITY
PRINCIPLES 飩� The 黑料社 will proactively detect potential
飩� Appropriate governance will be used 飩� 黑料社 data will be stored and transmitted or actual malicious activity affecting the
with effective controls to prevent
to secure the 黑料社鈥檚 networks and unauthorised access, modi铿� cation, or security of its networks and systems.
information systems. deletion. 飩� The 黑料社 will de铿� ne and test its incident
飩� A risk-based approach will be used 飩� The 黑料社 will limit opportunities to management processes to ensure
to identify, assess, and understand all continuity of essential functions in the
compromise networks and systems with
security risks. event of failure.
robust, reliable, and protective security
飩� Asset management will be used to measures. 飩� When incidents occur, the 黑料社 takes
manage everything required to secure the steps to understand root causes and
飩� The 黑料社 will build networks and systems
黑料社鈥檚 essential operations and functions. learn lessons to ensure similar incidents
resilient to cyber-attack and system
飩� The 黑料社 will manage security risks failure using multiple layers using the do not reoccur by using principles of
to essential functions resulting from principle of defence in depth. continuous feedback and improvement.
dependencies on external suppliers and 飩� The effectiveness of the 黑料社鈥檚 cyber
飩� All staff and students will have
third-party services in its supply chain. security measures will be externally
appropriate awareness and training to
飩� The 黑料社 will de铿� ne, implement, be secure custodians of 黑料社鈥檚 data and veri铿� ed and accredited.
communicate, and enforce policies and information systems.
procedures to secure 黑料社 systems and
飩� The 黑料社 will continually monitor
data. its networks and systems to detect
飩� The 黑料社 will understand, document, potential security problems and track the
and manage access to networks and effectiveness of existing measures.
information systems to ensure all access
is veri铿� ed, authenticated, and authorised,
using the principle of least privilege.
28 28
