informationsecurityincidentmanagementpolicy-investni.docVIP

INFORMATION SECURITY INCIDENT MANAGEMENT POLICY 1 INTRODUCTION Information security is everyone’s responsibility. All staff are required to take responsibility for the protection of personal and business sensitive information that they manage or access. It is therefore essential that all Invest NI staff are familiar with, and comply with, the organisation’s information security policies as set out in the Information Security Handbook. 2 PURPOSE 2.1 The purpose of this policy is twofold: firstly to ensure that all staff are fully aware and understand the process to be followed if an i