Recent policy updates

In February 2024, we made minor changes to four policies. The changes are outlined below.

1. Compliance Policy ISP-03

• Team name updated from 'Secretary's Office' to 'Legal Services and Secretariat'
• Added link to 'Records Management and Retention Policy'
• Minor context clarifications, grammar and link corrections.

2. Human Resources Policy ISP-05

• Updated links to Ordinance 10 (instead of Ordinance 28)
• Team name updated from 'Secretary's Office' to 'Legal Services and Secretariat'
• 3.2 Employment Contract Terms:
  • Updated outdated quotes from Ordinance 10 and General T&C of employment
• 3.4 Employee Termination, Suspension or Change of Appointment:
  • Updated statement to clearly define managers' responsibility for removing access from systems that are not centrally managed by IT Services
• Minor grammar and context clarifications.

3. User Management Policy ISP-08

• 3.3 Account and Privilege Management:
  • Added statement about removal of default user accounts and passwords
  • Updated example for when user access should be reviewed to include business driven changes to the roles.

4. Encryption Policy ISP-16

• 3.5 UK Law and Travelling Abroad
  • Removed a paragraph that is not directly linked to encryption. Statement added to Keep safe when you travel guidance.
• Added links to Keep safe when you travel guidance (staff and students only) and ITS Encryption Standard (staff only).
• Minor context clarifications, grammar and link corrections.

Read more about the Information Security policies.