Accessibility statement

Information security

Good information security practices will help you keep your personal information and the University's information secure.

Get in touch

If you think your device has been attacked or other activity of concern is taking place, contact the Computer Emergency Response Team.

If you're unsure about anything to do with Information Policy, just ask:

If you don't handle information appropriately you may:

  • Cause damage or distress to individuals, including aiding identity theft
  • Breach confidence of information provided by third parties
  • Breach statutory restrictions on the use or disclosure of information
  • Breach contractual agreements
  • Breach a duty of confidentiality or care
  • Cause financial loss or loss of earning potential to the University
  • Disadvantage the University in commercial or policy negotiations
  • Prejudice a criminal investigation or enable criminal activity
  • Undermine the management of the University and its operations

The Information Security Policy explains the ways that the University ensures the secure handling of its information while providing appropriate access.

It is supported by more specific policies which provide detail on how we handle activities which have information security implications.

The University's approach is based on ISO27001:2013. This is the international standard which defines the information security management processes that should be in place in an organisation, and the detailed control guidelines (ISO27002:2013).

What do I need to do?

The Protecting Information (PDF , 1,238kb) booklet is your quick guide to the key things you need to remember.

It includes:

If you read nothing else, read this!

The IT Services security website provides a wide range of practical information to help you keep your information and devices secure.

Protecting information in your role is continually developed to provide guidance related to your role and the activities you may undertake.

All information security policies and their associated guidance are listed on the University Information Policy index.