Issue - meetings

ISO27001 - Information Security Management System

Meeting: 21/01/2025 - Cabinet (Item 230)

230 Implementation of an Information Security Management System pdf icon PDF 614 KB

Decision:

That Cabinet approve the Implementation of the Information Security Management System for the Council.

 

Reason for Decision:

 

To align with the community plan objective 8: To be a top performing, modern and accessible Council.

 

Community trust in the Council to manage and use their data in a secure and compliant way, whilst demonstrating transparency.

 

Options Considered:

 

Various alternative frameworks and the option to take no action have been evaluated. However, this international standard for information security is mandated by the Council for procuring systems and technology, where applicable.

Minutes:

The Business Manager – ICT & Digital Services presented a report which outlined the design and implementation of the Information Security Management System (ISMS) for the Council. The purpose of the ISMS was to protect the Council’s information assets from various threats, ensuring confidentiality, integrity and availability.

 

In respect of next steps for the ISMS implementation, the Cabinet emphasised the importance of Member training to raise awareness.

 

AGREED     (unanimously) that Cabinet approve the Implementation of the Information Security Management System for the Council.

 

Reason for Decision:

 

To align with the community plan objective 8: To be a top performing, modern and accessible Council.

 

Community trust in the Council to manage and use their data in a secure and compliant way, whilst demonstrating transparency.

 

Options Considered:

 

Various alternative frameworks and the option to take no action have been evaluated. However, this international standard for information security is mandated by the Council for procuring systems and technology, where applicable.