50 likes | 211 Views
Secure Communications Tony Payne tony.payne@yjb.gsi.gov.uk YJB IT Security Officer. Overview:. The YJB and Youth Offending Teams share data on a regular basis, be it for project or BAU purposes
E N D
Secure CommunicationsTony Paynetony.payne@yjb.gsi.gov.ukYJB IT Security Officer
Overview: • The YJB and Youth Offending Teams share data on a regular basis, be it for project or BAU purposes • To facilitate the sharing of data, in particular young offender personal data, certain controls have to be implemented to ensure the data is communicated securely • The data processed as part of the YJS, relating to Young People, is sensitive in its nature and could cause harm or distress to the individual or incur reputational damage and financial consequences to the YJB or local authority if lost or misplaced. • If there is a data breach where a member of staff communicates sensitive data insecurely, then the YJB has a duty to log and report it as a security breach. If the breach contains a large amount of personal data or data that is particularly sensitive, the incident report may get escalated to the Information Commissioners Office
Secure ICT Communication Methods There are two approved methods, which both the YJB and users of the Youth Justice System (YOT’s, Local Authorities etc) can communicate securely. Connectivity User Group and Secure Email. Connectivity User Group The YJS Connectivity System provides a secure mechanism for the transfer of data between various stakeholders within the youth justice community. Secure Email - There are currently two options with regards to secure email; CJSM – Criminal Justice Secure Mail, YJB’s preferred option GCSX – (Government Connect Secure Extranet) Mail
All data of a sensitive nature (including YP personal data) should be sent from a secure email address to YJB email address, preferably via a CJSM email account. For example; tony.payne@mycouncil.gov.uk.csjm.net to tony.payne@yjb.gsi.gov.uk or if you have a GCSX address tony.payne@mycouncil.gcsx.gov.uk to tony.payne@yjb.gsi.gov.uk The below email communication method examples are not secure and must not be used to transmit sensitive data; tony.payne@mycouncil.gov.uk to tony.payne@yjb.gsi.gov.uk tony.payne@mycouncil.gov.uk to tony.payne@yjb.gov.uk Points to note regarding email communication
Security Breaches and the Data Protection Act The YJB have stipulated controls in Data Sharing Agreements and Information Sharing Policies, both organisations should follow to ensure the confidentiality and integrity of sensitive data. What questions need asking prior to communicating personal/sensitive data; Is the email address I’m sending from secure ? Is the email address I’m sending to secure ? Do I need to send the data at all ?