From d65d787d285f223165aa090cbf25e6b8497480fc Mon Sep 17 00:00:00 2001 From: Simon Li Date: Thu, 5 Oct 2023 14:10:46 +0100 Subject: [PATCH] Add external security standards back --- docs/source/evaluations/alan_turing_institute.md | 3 +++ docs/source/pillars/information_governance.md | 6 +++++- 2 files changed, 8 insertions(+), 1 deletion(-) diff --git a/docs/source/evaluations/alan_turing_institute.md b/docs/source/evaluations/alan_turing_institute.md index 74d73cca..6be10e1f 100644 --- a/docs/source/evaluations/alan_turing_institute.md +++ b/docs/source/evaluations/alan_turing_institute.md @@ -28,6 +28,9 @@ ##### Potential Improvements - Improve our document handling workflow by developing an Information Governance App through which all projects can be managed directly by approved users. * - 1.1.3. + - + - +* - 1.1.4. - 1 - - The Institute has Legal and Data Protection Teams who ensure that projects meet our institutional requirements. - Our sysadmin team is currently appropriately sized for the number of projects we are handling. diff --git a/docs/source/pillars/information_governance.md b/docs/source/pillars/information_governance.md index 5ed24a5b..e3273e25 100644 --- a/docs/source/pillars/information_governance.md +++ b/docs/source/pillars/information_governance.md @@ -52,6 +52,10 @@ This {term}`business process ` involves measures, safeguards, - You must ensure controls are implemented to ensure the requirements are met. - Control implementation should be systematic and directly aligned to the internal and stakeholder requirements. - Mandatory +* - 1.1.3. + - Your TRE should adhere to one or more external security standards. + - These should be stated to all stakeholders. + - Recommended ``` ### Resource Allocation Process @@ -66,7 +70,7 @@ This {term}`business process ` involves assigning, distributin - Statement - Guidance - Importance -* - 1.1.3. +* - 1.1.4. - You must ensure there are adequate resources to meet information governance requirements. - Ensuring information governance controls are suitable and enforced requires an investment of funding and people appropriate to the size of the TRE. - Mandatory