Information assurance

What did everyone have for lunch?

Clear desk audits must take place once a month

• True

• False

How are clear desk audits done?

• Quick walk around to check desks are tidy and do this every month

• call staff from home and ask if their desks are tidy

• walk around complete document and send to ISO officer

• Catch up with staff once a month and ignore files on desks

What do you do when you send an email to the wrong person?

• Laugh with a colleague

• Panic

• Fill necessary form and contact incident reporting line

• Ignore it, send apologies and send to correct recipient

GDPR is everybody's responsibility

• True

• False

You go for a tea break, what do you do with your computer?

• Leave it in your car

• Turn off the screen so no one can see your work

• Notify colleague to watch your computer

• Lock computer

Is it appropriate to check vetting documents in reception?

• No

• Yes

• Quickly if no one is watching

• Sometimes

Are we allowed to share information with 3rd parties?

• Yes

• No

• Only with the correct documents

• Yes with line management approval

You take a call from a PoPs contact asking for information, can you share?

• Yes but only if you have written consent for the PoP

• No

• Yes

• Only basic information

You know a colleague who has printed off highly sensitive information and taken this home, what do you do?

• You trust the colleague as they have done this before so dont worry

• You report this to your line manager and incident reporting line

• ask them to show you the information and read it together in the staff room

• print some stuff for yourself as it would be helpful to have at home