Issue - meetings

Information Security, Risk and Governance Framework and Policies

Meeting: 17/01/2017 - Scrutiny (Policy and Performance) Committee (Item 140)

140 INFORMATION SECURITY, RISK AND GOVERNANCE FRAMEWORK AND POLICIES pdf icon PDF 255 KB

To consider the attached report of the Director of Governance.

Additional documents:

Minutes:

The Director of Governance presented the report on the Information Security, Risk and Governance Framework and Policies.

 

The policies had been developed by the East Kent Corporate Information Governance Group, which was composed of representatives from Canterbury, Dover and Thanet together with key staff from EK Services (ICT), East Kent Human Resources and East Kent Audit Partnership.

 

Members were advised that appropriate training and development would be delivered to staff with the intention of affecting positive behavioural change.   

 

RESOLVED:  That it be recommended to the Cabinet that decision CAB125 be endorsed as follows:

 

(a)    That the Information Security and Governance Framework and the associated suite of Information Governance Policies at Appendix 3 to the report be approved for implementation from 9 January 2017.

 

(b)   That the Director of Governance be authorised to make any future minor changes or amendments to the Framework and associated policies, providing that these changes do not change the substance of any of the policies.

 

(c) That the Director of Governance be appointed as the Senior Information and Risk Officer for the Council, and be authorised to discharge the functions and responsibilities of that role, and the Head of Corporate Services be appointed as his deputy.


Meeting: 09/01/2017 - Cabinet (Item 125)

125 Information Security, Risk and Governance Framework and Policies pdf icon PDF 255 KB

To consider the attached report of the Director of Governance.

 

Responsibility: Portfolio Holder for Corporate Resources and Performance

Additional documents:

Minutes:

It was agreed:

 

(a)  That the Information Security and Governance Framework and the associated suite of Information Governance Policies at Appendix 3 to the report be approved for implementation from 9 January 2017.

 

(b)  That the Director of Governance be authorised to make any future minor changes or amendments to the Framework and associated policies, providing that these changes do not change the substance of any of the policies.

 

(c)  That the Director of Governance be appointed as the Senior Information and Risk Officer for the Council, and be authorised to discharge the functions and responsibilities of that role, and the Head of Corporate Services be appointed as his deputy.