All Council operating procedures and system processes outlined in the Council’s IT Security Policy must be documented:
Operating procedures must be documented to an appropriate level of detail for individuals/departments using them and should include the following areas:
• Processing and handling of information (information classification, confidentiality requirements)
• Backup procedures - Information Backup and Restore Procedures: www.derbyshire.gov.uk/data
• Work scheduling requirements (considering interdependencies, completion times etc)
• Instructions and guidance for handling errors
• Contact and reporting details in the event of unexpected operational issues
• Procedures for handling special outputs (e.g. special stationery like cheques, payslips)
• System restart and recovery procedures in the event of system failure
• Procedures for all ‘housekeeping’ functions
• Procedures for audit and assurance reviews