IT Security and Risk Management

These are very challenging issues for all organisations.

The potential for "anywhere, anyone, anytime" access to data and systems that is so exciting about IT can also create major problems in ensuring adequate security and risk management.

Accountancy and audit regulations require organisations to manage risk to an appropriate level, taking appropriate measures on this topic. For instance, SORP regulations (Statement of Recommended Practice) require that a statement confirming that the major risks to which a charity is exposed, as identified by the trustees, has been reviewed and that systems have been established to manage those risks, though there is more that can be done to enhance the risk management process.

This is a good piece of legislation, not prescriptive but requiring action. Managing risk to an appropriate level will mean different measures for different organisations.

Let's take as an example two types of organisation we deal with:

A community arts organisation would need to ensure that there was a secure copy of all its data but be relatively relaxed about giving everyone complete access to its resources. Conversely a social care organisation responsible for vulnerable young adults needs both restricted access internally to key parts of its IT systems, be sure that external threats are minimised and may need to have all staff CRB checked.

IT Security and Risk Management issues include:

Disaster Recovery planning
Hacking and unauthorised access prevention
Controlling staff access to systems and data
Physical security and environmental vulnerability of systems

Co-Operative Systems has 20 years practical experience in IT security and risk management, as part of work all the clients we serve get regular Security and Risk Management assessment as part of our Red Box programme and we regularly make presentations on IT Security and Risk management for the NCVO and the Institute of Risk Management.

If you are concerned about the suitability and robustness of your current arrangements, or perhaps just would like second pair of eyes to check over your arrangements, we are happy to assist.

Free sample IT documents and checklists also available via the Enquire button.

IT Security and Risk Management

Bulletin