Organisational Security. 2.1 The Data Processor has implemented the following organisational security measures:
Organisational Security. The Platform Admin role on the Fabo Learning Platform is only given to two parties. The first party is staff in Fabo Learning Lab and only to staff that need it in order to complete their tasks related to their work on the platform. The second party is the developer from our service pro- vider, with whom we have a Data Processing Agreement in place. Any other role (e.g. Organisational Learning Manager), is only given to specific people upon re- quest from the Member Organisation. Technical security In this section, we describe the relevant security settings employed on the Fabo Learning Plat- form. We have taken a point of departure in Google’s “Web application security questionnaire” as it encompasses the central elements relevant to the security on the platform. Basic security HTTPS: The web application is reachable exclusively over HTTPS. Even if the user manually edits the URL to start with http://, it won't work, or it will redirect to https:// Cookies: As there is no sensitive information in our cookie data, they have not been decorated with the “htttpOnly” special key mechanism.
Organisational Security. It is the responsibility of the individuals across ForgeRock’s organisation to comply with these practices and standards. To facilitate the corporate adherence to these practices and standards, the function of information security provides:
Organisational Security. (a) Responsibility – Paperform will assign responsibility for information security management to appropriately skilled personnel.
Organisational Security. The Data Importer will implement security policies and procedures to classify sensitive information assets, clarify security responsibilities and promote awareness for employees. The Data Importer implements a security awareness program to train personnel about their security obligations. This program includes training about data classification obligations; physical security controls; security practices and security incident reporting. The Data Importer will conduct periodic risk assessments and review and, as appropriate, revise its information security practices at least annually or whenever there is a material change in The Data Importer’s business practices that may reasonably affect the security, confidentiality or integrity of Personal Data, provided that The Data Importer will not modify its information security practices in a manner that will weaken or compromise the confidentiality, availability or integrity of Personal Data. The Data Importer carries out due-diligence checks on its data processing partners & service providers to ensure ongoing compliance and minimisation of data related incidents. Incident Management. The Data Importer maintains an information security incident management program that provides timely response and notification as appropriate to security incidents to protect personal data.
Organisational Security. The Supplier adopts TNT’s security policy. TNT’s Corporate Security department is responsible for an active and passive approach of incidents and risks, which can then be managed in a controlled manner. The department actively advises TNT Management on controlling incidents and risks. The employees working within Corporate Security and those security managers in the various countries reporting into Corporate Security, are responsible for registering and reporting on incidents so that preventative actions can be taken. TNT’s Registration Centre for Company Security is available 24 hours per day, 365 days per annum. Depending on the incident action will be undertaken. All urgent notifications are notified to the Centre immediately. TNT’s Criminal Investigations Department investigates (suspected) cases of fraud, break-ins, theft and robberies. In addition to this the Suppliers own security policy states that: "Security is a vital element of our service and key to the success of the company. Everyone in the organisation is responsible for taking the necessary precautions that will safeguard consignments and assets entrusted to our care". "Every business unit must deploy an effective security structure responsible for the prevention, investigation and reporting of incidents that result in loss or potential loss to the company. Where there is a suspicion or an allegation of dishonesty against an individual or individuals the investigation must be undertaken outside the line management of that individual or individuals. A report will be provided which will be submitted to the appropriate level of management. All reports of fraud or corruption must be reported to the Head of Security". The Suppliers policy specifically addresses the protection of information, assets, processes and systems and deals with personnel recruitment and risk assessments. Checks on Eligibility to Work in the UK are an integral part of the Supplier’s recruitment process - which states: "Proof of Eligibility to Work in the UK” must be provided and copies taken and signed as seen by manager before the interview begins". All employees who work in the "Mail Handling" area are subject to additional checks. The checks can be summarised as follows: Proof of identity Proof of address Proof of National Insurance Number year employment history Criminal Records Check Test Letters Transit test letters shall be sent to various individuals, either to private addresses or company locations within the des...
Organisational Security. 1. When media are to be disposed of or reused, procedures must be implemented to prevent any subsequent retrieval of any Seagate Personal Information stored on them before they are withdrawn from the inventory. When media are to leave the premises at which the files are located as a result of maintenance operations, procedures must be implemented to prevent undue retrieval of Seagate Personal Information stored on them.
