Request Approval to Publish Security Breach Policy

[warmanaMOJ]

Hello @cybersquirrel

(cc @L-Crosby FYI )

Please may I request approval to publish new Security Breach Policy documentation? The material has been supplied by Group Security; the current draft (preview here) has been checked by them.

A full set of the changes proposed in this publication can be seen here.

Many thanks.

[cybersquirrel]

Hello,

Thanks for sharing this. A few comments:

• I think this doc should be approved not just by me, but should go to the ISR board, as it is setting out (at a high level admittedly) sanctions for breaching policy, plus the mechanism that this will flow through (i.e. that each business area sets its own threshold and mechanism within the outline framework).
• Style: why is it a 'corporate security breach policy' and not 'security breach policy'?
• Minor: I think we should link to the things we are saying need to be complied with - e.g. the Civil Service Code of Conduct.
• Minor: I don't understand the "particularly Palace of Westminster passes" as those aren't ours; should this be phrased as "including passes provided by other organisations, such as Palace of Westminster passes"?
• Sharing IT passwords is a tricky one, given we currently force job share users to do this. How about 'unauthorised password sharing' to cover this scenario, and things where we have single accounts for things like social media?

Could we discuss the approval piece please?

Many thanks,

Jon.

[warmanaMOJ]

Hello @cybersquirrel

Thank you for your feedback.

A fresh version of the draft content has been uploaded, addressing your much appreciated points. For example, the explanation regarding Palace of Westminster passes is included. The changes have been checked with Group Security.

Thanks again.

[cybersquirrel]

Was this change deployed? I am happy with it.

[warmanaMOJ]

Hello @cybersquirrel

(FYI @L-Crosby )

Following the recent feedback reviews, we've updated the draft content. Please may I request approval to publish this content?

A full set of the changes introduced in this publication may be seen here.

Many thanks.

[L-Crosby]

Approved.