Information Systems

The purpose of this policy is to provide guidelines for the allocation and use of computers for staff within the College.

This Cyber Security Policy has the following purposes:

• Protect the operational integrity and availability of the College’s normal operations facilitated by its personnel and IT resources;
• Protect the confidentiality, integrity and availability of data and information managed and retained by the College;
• Protect against external intrusion, denial of service, ransomware, and all other malicious breaches of the College’s IT environment, whether internal or external in origin;
• Ensure all personnel are aware of potential cyber risks and are trained to detect, respond and recover from cyber events;
• Prevent unauthorised and unapproved IT activity of any type within the College’s IT environment;
• Govern IT practices to ensure cyber security is a normal and expected part of the way the College operates internally, and with its students, staff and external stakeholders;
• Manage and recover from any adverse cyber incident in the most effective and efficient manner to restore normal operations as quickly as possible;

Continually review and improve cyber security as the College’s IT environment and the real-world cyber security environment evolve.

The IT Acceptable Use Policy aims to give clear guidelines for the acceptable and unacceptable use of the College’s IT equipment and systems.