Operations

The purpose of this policy is to provide guidelines for the allocation and use of computers for staff within the College.

This Cyber Security Policy has the following purposes:

• Protect the operational integrity and availability of the College’s normal operations facilitated by its personnel and IT resources;
• Protect the confidentiality, integrity and availability of data and information managed and retained by the College;
• Protect against external intrusion, denial of service, ransomware, and all other malicious breaches of the College’s IT environment, whether internal or external in origin;
• Ensure all personnel are aware of potential cyber risks and are trained to detect, respond and recover from cyber events;
• Prevent unauthorised and unapproved IT activity of any type within the College’s IT environment;
• Govern IT practices to ensure cyber security is a normal and expected part of the way the College operates internally, and with its students, staff and external stakeholders;
• Manage and recover from any adverse cyber incident in the most effective and efficient manner to restore normal operations as quickly as possible;

Continually review and improve cyber security as the College’s IT environment and the real-world cyber security environment evolve.

The IT Acceptable Use Policy aims to give clear guidelines for the acceptable and unacceptable use of the College’s IT equipment and systems.

To provide clarity to all College staff (including volunteers) on the College’s social media policy and how to conduct themselves on social media. It is not the intent of this policy to prohibit the use of social media by members of the College community.  Rather, the policy establishes clear standards and guidelines in relation to the use of social media, where such use potentially impacts adversely upon: the operations, interests or reputation of the College; individual members of the College community; relationships with or between members of the College community.