Business Challenges |
Information Assurance
Information Assurance
How NETconsent helps
Information assurance and IT security remain a high priority for all organisations. The requirement to comply with regulatory requirements is essential to avoid reputational damage, fines and the high costs of litigation and putting issues right.
- NETconsent electronic acceptance of policies at logon is a practical, reliable and cost-effective method of ensuring that all users read and accept information assurance and other IT usage policies.
- NETconsent records information about when a user accepted or declined a policy, so there is no ambiguity over policy version control.
- NETconsent shows how well someone has understood each policy by testing their understanding, thereby identifying knowledge gaps and enabling risk mitigation.
- NETconsent reports show who has yet to sign up to policies, without the administrative burden associated with more traditional record keeping.
- NETconsent provides real-time management reports showing overall levels of compliance, crucial to improving IT governance.
Information Assurance Challenges
The pace of technology keeps accelerating and it is becoming impossible for IT departments to keep one step ahead of new security threats through technology enforcement alone. The growing importance of social networking applications such as facebook, twitter and wikis are changing the computing habits of employees and opening up ever more threats to information assurance.
Information Assurance Requirements
Organisations are legally obliged to take all appropriate technical and organisational measures to avoid accidental loss or disclosure of the information it holds and avoid unauthorised or unlawful processing of data. Helping employees to become aware of and understand information assurance threats is paramount in the fight for improved information assurance. NETconsent policy management software cost-effectively automates the whole policy management process so that everyone is understands their information responsibilities.
Information Assurance Legislation & Standards
NETconsent automated policy management software helps to raise awareness of and measure understanding of policies and procedures relating to the following legislation and regulatory standards.
- Data Protection Act 1998
- Human Rights Act 1998
- Freedom of Information Act 2000
- The 1990 Computer Misuse Act
- Regulation of Investigatory Powers Act 2000
- BS7799/ISO17799 Information Security Management
- Payment Card Industry Security Standards Council
- Caldicott Report
- HSC 1999/053 Records Management
- Code of Connection
- N3 - Information Governance Toolkit