|
Both companies and individuals are becoming increasingly concerned about the
control, security (eg BS 7799) and information management in general –
particularly that referring to individuals. The legislation, such as the
Data Protection Act and the Database Act, is becoming more powerful and the
penalties for companies failing to protect an individual’s private
information effectively are more severe.
A British Standard (BS 7799) has recently been introduced to address this
problem and this is one way in which companies can ensure they are
controlling and maintaining all their information effectively. BS 7799
covers not only data stored electronically but also on paper and in the
heads of the staff. Whatever and wherever the information is, it needs
to be properly protected and managed.
Compliance
with legislation covering information management is critical and
non-compliance could become a source of severe embarrassment to an
organisation. The revised Data Protection Act together with the Database
Act and the other Acts of Parliament which have either been implemented
recently or will be shortly, all make demands on the organisation
holding and processing information; particularly personal information.
In addition the loss of certain critical pieces of information –
clients’ details, product information and other similar information –
could jeopardise the viability of the company. Allowing a disgruntled
employee to destroy or steal valuable commercial information could
seriously disrupt business operations or, at the very least, embarrass
the company.
To audit an organisation’s information management processes is a skilled
and important job which should be undertaken by properly trained
auditors who are familiar with the Data Protection Act, the Database Act
and BS 7799. They will advise on areas of weakness and recommend ways of
improving the situation. They can also advise on the necessary steps
that must be taken in order to gain BS 7799 accreditation.
ValueAdding.com can provide a comprehensive information management service.
We can supply fully qualified and very experienced auditors to assess your
particular requirements either to satisfy the requirements of BS 7799 or
just to make the company more secure. We will provide a report detailing any
problem areas and areas where further work is required regarding the Data
Protection Act, the Database Act and BS 7799. We can then help you to
implement those recommendations whether they are IT related or just business
issues. If you wish to obtain the accreditation that BS 7799 offers, we can
help you to meet the documentation standards and undertake the process
change which may be necessary. For major projects we can offer project
management skills as well and training for staff in the new way of doing
things when required.
Email
us for more information:
click here
|