The IA of Technology Compliance

Do you operate a safe technology environment to protect your employees and data? Are you ISO 27002 ‘Information technology – Security techniques – Code of practice for information security management’ compliant.

Employees
Misuse of computers by employees is a technology threat. Defamatory statements, internet breach of copyright and Emails containing racial slurs, pornographic images, ageist or gender related remarks can damage your business.To minimise liability employers must demonstrate reasonable precautions and due diligence. These reasonable precautions are part of your Intellectual Assets (IA).

Data
The Data Protection Act 1998 creates obligations on businesses about information held by them. Most businesses need to nominate a data controller and register under the act. A useful audit tool is available on the Information Commissioners pdf
Your own registration, policies and procedures are also part of your IA which may include backing up data regularly, offsite storage, disaster recovery/business continuity planning and the use of external services.