The Information Commissioner’s Office (ICO) and National Cyber Security Centre (NCSC) have recently updated their guidance on data protection and cyber security. With many of us now working from home we thought this would be a useful reminder of what to consider.
The ICO recognises the unprecedented challenges we are all facing during the Coronavirus (COVID-19) pandemic.
They know firms might need to share information quickly or adapt the way they work. Data protection need not stop firms doing that. It’s about being proportionate and making reasonable judgements. Think about how you, as a member of the public, would feel about any judgements made. If something feels excessive from the public’s point of view, then it probably is.
The ICO has provided some revised guidance and answers to the questions they’re being asked at this time.
The National Cyber Security Centre has also issued some guidance – ‘Home working: preparing your organisation and staff’.
This guidance is intended to helps firms ensure their organisation is prepared for any increase in home working, and advice on spotting coronavirus (COVID-19) scam emails.
Finally, we would suggest that you refer to ATEB’s previous article on Cyber Resilience.
SM&CR training
Alistair MacDougall Compliance FCA, SM&CR
During a recent workshop, the FCA commented on SM&CR training. They do not believe that some e-learning or short generic training meets their requirements. We believe that this is primarily a reference to the need for all staff to understand the intention of the SM&CR to move firms to a culture of accountability at all […]