Safety in organisations

Safety in organisations

1. Physical security methods

   • Locks
     • Computer rooms should be locked and only authorised people should have access to the keys
   • Alarms
     • Should be in place for computer rooms and set to go off if room accessed in unaccessible hours
   • Identification
     • A person sometimes has to show identification to gain access to a room. This may include swiping an identity card or using biometrics

2. Software security methods

   • Password system
     • Every authorised user of the system is given a username and password, no one without the password can access the system, the password must be entered everytime access is required
   • Back-ups
     • Important data should be backed up regularly. This means making a second copy of the data. If the data on the computer is ever lost, it can be restored
   • Encryption
     • Data can be changed into secret codes that are not readable by anyone who doesn't have authorisation
   • File Attributes
     • Characteristics of a file only the user can set, a read-only attribute can be set which ensures people can only read the file and cannot edit it with authorisation
   • Monitoring
     • Computers can be monitored so people can see what is happening on the computer, if there is unusual activity it will be reported

3. Data protection act

   • Obligations:store and process data only for lawful stated purposeCollect and process data fairly meet rights of data subjectkeep accurate datanot send data abroad other than to EU countries Keep only necessary and adequate data Can't be kept longer than necessary Has to be kept secure
   • Passed in 1984
   • Revised in 1988
   • Main provisions of this act introduced in 2000
   • Created because data about people being stored wasn't being looked after
   • Act deals with personal data
   • Data subject rights:
     • Access data stored about them
     • Correction of data
     • Compensation if handled wrongly
   • Exemptions:
     • Any data held for national security
     • Any data that helps with the detection of crime
     • Data for home use
     • Data used for calculations

4. Computer misuse act

   • created in 1990
   • Makes it illegal to:
     • Gain unauthorised access to files stored on computer system
     • Gain unauthorised access to files and use them for crime
     • Change or delete files unless authorised to

5. Electronic Communications act

   • Passed in 2000
   • Introduced to set up a register of cryptographers
   • Helps e-commerce
   • Recognise digital signatures as legal
   • A cryptographer helps to encrypt data so it is only clear if you have a key to decode it

6. Regulation of investigatory powers act

   • Passed in 2000
   • Makes it illegal to intercept emails, phone calls, letters and other communications without permission
   • Helps protect individual from states
   • prevents people from eavesdropping on phone calls

7. Health and safety

   • Health problems
     • Pain in wrist caused by repetitive actions Pain caused by leaning on elbow while using mouse Eyesight defects from staring at screen Deep vein thrombosis General tiredness Backache
   • Safety problems
     • Trailing wires risk of fire or electrocutionheavy equipment that could fall Food that lodges in key board drinks that could spill onto keyboard proximity to water