Staff Vetting and Training

In this section

1
Asset management
2
Data subject rights
3
Information management
4
Information Security Incident Process
5
IT and Information Security
6
Physical Security

7
Policies
8
Privacy Management
9
Security Classification
10
Staff Vetting and Training
11
Transferring Information

Staff Vetting and Training

All contractors who have staff that access council data, including those involved in administration, hosting, support and/or development of systems and software should be subject to the necessary vetting and training procedures.

Vetting should include:

employee disclosure of any convictions which are not yet spent;
verification of identity, nationality and immigration status, and;
three years of references including explanation of employment gaps.

Contractors need to ensure staff are aware of their responsibilities regarding information security and policy compliance and provide necessary training to support this.

Last reviewed: 16/08/2023

Previous Security Classification Next Transferring Information