Page 28 - Data and Digital Technology Strategy 2024-2026
P. 28
STRATEGIC PRINCIPLES STRATEGIES AND ACTIONS
SECURITY
PRINCIPLES 飩� The 91暗网 will proactively detect potential
飩� Appropriate governance will be used 飩� 91暗网 data will be stored and transmitted or actual malicious activity affecting the
with effective controls to prevent
to secure the 91暗网鈥檚 networks and unauthorised access, modi铿� cation, or security of its networks and systems.
information systems. deletion. 飩� The 91暗网 will de铿� ne and test its incident
飩� A risk-based approach will be used 飩� The 91暗网 will limit opportunities to management processes to ensure
to identify, assess, and understand all continuity of essential functions in the
compromise networks and systems with
security risks. event of failure.
robust, reliable, and protective security
飩� Asset management will be used to measures. 飩� When incidents occur, the 91暗网 takes
manage everything required to secure the steps to understand root causes and
飩� The 91暗网 will build networks and systems
91暗网鈥檚 essential operations and functions. learn lessons to ensure similar incidents
resilient to cyber-attack and system
飩� The 91暗网 will manage security risks failure using multiple layers using the do not reoccur by using principles of
to essential functions resulting from principle of defence in depth. continuous feedback and improvement.
dependencies on external suppliers and 飩� The effectiveness of the 91暗网鈥檚 cyber
飩� All staff and students will have
third-party services in its supply chain. security measures will be externally
appropriate awareness and training to
飩� The 91暗网 will de铿� ne, implement, be secure custodians of 91暗网鈥檚 data and veri铿� ed and accredited.
communicate, and enforce policies and information systems.
procedures to secure 91暗网 systems and
飩� The 91暗网 will continually monitor
data. its networks and systems to detect
飩� The 91暗网 will understand, document, potential security problems and track the
and manage access to networks and effectiveness of existing measures.
information systems to ensure all access
is veri铿� ed, authenticated, and authorised,
using the principle of least privilege.
28 28
