Decision

The Cabinet had before it a report * from the Head of Digital Transformation and Customer Engagement reviewing the Information Security Management policies.

RESOLVED that:

1. Cabinet recommend to Full Council the approval of the attached policies for implementation within the Council. Namely, Access Control, Asset Management, Operations Security, Physical Environment Security, Remote Working, and Encryption and Cryptography Policy.

1. That delegated authority be given to the Deputy Chief Executive and Senior Information Risk Owner (SIRO) in consultation with the IT and Information Governance (ITIG) Board to agree future changes to the attached policies. This to also include authority to sign off future new policies that may be required to support Information Security Management within the Council.

1. That delegated authority be given to the Deputy Chief Executive and Senior Information Risk Owner (SIRO) in consultation with the IT and Information Governance (ITIG) Board to agree future changes to the Data Protection, Information Security and Records Management policies in relation to supporting the DWP MOU work.

Note: * Report previously circulated.