Information Systems

This Cyber Security Policy has the following purposes:

• Protect the operational integrity and availability of the College’s normal operations facilitated by its personnel and IT resources;
• Protect the confidentiality, integrity and availability of data and information managed and retained by the College;
• Protect against external intrusion, denial of service, ransomware, and all other malicious breaches of the College’s IT environment, whether internal or external in origin;
• Ensure all personnel are aware of potential cyber risks and are trained to detect, respond and recover from cyber events;
• Prevent unauthorised and unapproved IT activity of any type within the College’s IT environment;
• Govern IT practices to ensure cyber security is a normal and expected part of the way the College operates internally, and with its students, staff and external stakeholders;
• Manage and recover from any adverse cyber incident in the most effective and efficient manner to restore normal operations as quickly as possible;

Continually review and improve cyber security as the College’s IT environment and the real-world cyber security environment evolve.