Cyber Scotland Week - Employee awareness of cyber security

Continued promotion and employee awareness of cyber and information security through training and communication is essential. We encourage employees to remain vigilant for security threats and to always protect information used in their role - report security incidents, or if you suspect anything that may compromise security or informational assets.

We have an Information Security Management System (ISMS) which is aligned to the ISO 27001 standard.

The ISMS is a set of interconnected policies, standards, guidance, and processes which promote the importance of information security in the organisation and the role everyone has in protecting the information they use. Our ISMS includes the following policies:

• Information Security Policy
• IT Acceptable Use Policy
• Data Protection Policy
• Data Sharing Policy
• Records Management Policy
• Social Media Policy

These policies are made available to every user of information, services, and infrastructure within the council through communications channels, including our intranet and training programmes. All information users within the council must be made aware of this ISMS and its role in helping to ensure that information remains secure, and that our handling of its information remains compliant with its policies.

The e-learning catalogue on Fusion contains the following modules related to information and cyber security, and it is recommended that all employees who use council computers and information assets complete these:

• Cyber Security – Stay Safe Online
• Email and Online Risk
• Phishing Attacks – Dealing with Suspicious Emails
• An Employee Guide to the IT Acceptable Use Policy
• Information Security
• Information Governance – An Introduction
• Introduction to Data Protection

Some of these modules are not only relevant to securing the council’s information but could also relate to your personal information outside of the council. It is important to always stay safe online.

Useful links and guidance

Information management policies | myWorks (southlanarkshire.gov.uk)

IT acceptable use policy | myWorks (southlanarkshire.gov.uk)

Data protection | myWorks (southlanarkshire.gov.uk)

Information sharing | myWorks (southlanarkshire.gov.uk)

Information management policies | myWorks (southlanarkshire.gov.uk)

Social media policy | myWorks (southlanarkshire.gov.uk)

Learning and development | myWorks (southlanarkshire.gov.uk)