1. ORGANISATIONAL SYSTEMS SECURITY Unit 15 Lecture 6
Information Security (M1)
BTEC NAT Unit 7 - Organisational Systems Security

2. BTEC NAT Unit 7 - Organisational Systems Security
Learning Objectives
To understand the 3 areas of Information security to be considered to meet legal requirements such as the Data Protection Act
Confidentiality of Data
Integrity & Completeness of Data
Availability & Access to Data
BTEC NAT Unit 7 - Organisational Systems Security

3. Information Security
Confidential personal data about you is kept on a number of systems
Name some systems where data about you is stored?
Example: Student Records
BTEC NAT Unit 7 - Organisational Systems Security

4. Confidentiality of Data
In the role of Systems Manager
It is your job to preserve the confidentiality of data held
What must you consider?
Example: Who internally should be able to see the data?
Provide a list of other examples
BTEC NAT Unit 7 - Organisational Systems Security

5. Integrity & Completeness of Data
The integrity (accuracy) and therefore completeness of data is critical on a number of systems.
Having incorrect data can cause personal as well as commercial damage.
How much data should you keep and for how long?
What systems can you think of where individual distress can be caused and possibly lead to legal action?
How would you check that the data is accurate and kept up to date?
BTEC NAT Unit 7 - Organisational Systems Security

6. Availability & Access to Data
Who can access the data?
How can it be controlled?
How often should the access be reviewed?
Some data can only be accessed by request legally.
Can you think of any examples?
BTEC NAT Unit 7 - Organisational Systems Security

7. Assignment 1 (M1) Apply what you have learned to your assignment
Relate this information to the threats already studied and the impact on organisations
BTEC NAT Unit 7 - Organisational Systems Security

8. Disaster Recovery Policies (D1)
There a number of different methods to recover a system from natural disasters (already studied)
Research organisation recovery policies
Consider the logical steps to follow
Produce recovery plans for at least two different methods
BTEC NAT Unit 7 - Organisational Systems Security