Page 28 - Data and Digital Technology Strategy 2024-2026
P. 28
STRATEGIC PRINCIPLES STRATEGIES AND ACTIONS
SECURITY
PRINCIPLES 飩� The 国产高清av网址 will proactively detect potential
飩� Appropriate governance will be used 飩� 国产高清av网址 data will be stored and transmitted or actual malicious activity affecting the
with effective controls to prevent
to secure the 国产高清av网址鈥檚 networks and unauthorised access, modi铿� cation, or security of its networks and systems.
information systems. deletion. 飩� The 国产高清av网址 will de铿� ne and test its incident
飩� A risk-based approach will be used 飩� The 国产高清av网址 will limit opportunities to management processes to ensure
to identify, assess, and understand all continuity of essential functions in the
compromise networks and systems with
security risks. event of failure.
robust, reliable, and protective security
飩� Asset management will be used to measures. 飩� When incidents occur, the 国产高清av网址 takes
manage everything required to secure the steps to understand root causes and
飩� The 国产高清av网址 will build networks and systems
国产高清av网址鈥檚 essential operations and functions. learn lessons to ensure similar incidents
resilient to cyber-attack and system
飩� The 国产高清av网址 will manage security risks failure using multiple layers using the do not reoccur by using principles of
to essential functions resulting from principle of defence in depth. continuous feedback and improvement.
dependencies on external suppliers and 飩� The effectiveness of the 国产高清av网址鈥檚 cyber
飩� All staff and students will have
third-party services in its supply chain. security measures will be externally
appropriate awareness and training to
飩� The 国产高清av网址 will de铿� ne, implement, be secure custodians of 国产高清av网址鈥檚 data and veri铿� ed and accredited.
communicate, and enforce policies and information systems.
procedures to secure 国产高清av网址 systems and
飩� The 国产高清av网址 will continually monitor
data. its networks and systems to detect
飩� The 国产高清av网址 will understand, document, potential security problems and track the
and manage access to networks and effectiveness of existing measures.
information systems to ensure all access
is veri铿� ed, authenticated, and authorised,
using the principle of least privilege.
28 28
