Safety in Organisations

Safety in Organisations

1. Physical Security Methods

   • LOCKS: Computer rooms should be locked and only authorised people with keys should be allowed to access them. Some Computers have cases with locks which prevent them being switched on.
   • ALARMS: Burglar alarm systems should be in place for computer rooms or rooms where valuable equipment is stored. Sensors should detect any attempt to enter a room and sound the alarm.
   • IDENTITIFICATION: To gain access to a computer room a person should have an identity card to swipe through a card reader to gain entry. Biometric systems can be used (such as voice recognition) to ensure no unauthorised people have access.

2. Software Security Methods

   • PASSWORD SYSTEM: Every authorised user of a computer system is given a username and password which must be entered every time they log in. The computer only allows access to a username and password it recognises.
   • BACK-UPS: Important data should be backed up regularly so if a problem arises with the original copy, the back-up copy can be used instead. The back-up copy of data should be stored in a secure place such as a locked/fireproof safe. Computers can be scheduled to make back-ups.
   • ENCRYPTION: Data can be changed into secret codes so that it is not readable by anybody who does not have any authorisation. The intended user of the data must have a way of decoding the data.
   • FILE ATTRIBUTES: If the 'read-only' attribute is set on a file then the file can be viewed but cannot be changed.

3. Legal Issues

   • Data Protection Act: To ensure personal data is not accessed and misused by unauthorised users. The subject has certain rights and the organisation has certain obligations to follow.
     • Store and process data only for lawful purposes.
     • Collect and process data fairly and lawfully.
     • Keep only relevant/adequate data for the purpose it is intended for.
     • To meet the rights of the data subject.
     • Data must be accurate and up-to-date.
     • Data must not be kept longer than necessary.
     • Keep data secure.
     • Do not send data to non EU countries.
     • EXEMPTIONS
       • Purpose of national security
       • Helps in the detection of crime
       • Data for home use
   • Computer Misuse Act: to combat new crimes which have emerged due to the development of ICT.
     • It is an offence to hack into a system and view files without authorisation.
     • It is an offence to gain unauthorised access to files and then use it as blackmail/fraud.
     • It is an offence to change/delete files without authorisation (viruses).
   • Electronic Communications Act: To encrypt sensitive information (such as credit card details) when it is sent over the internet. So if a hacker accesses the data it is meaningless.
   • Regulation of Investigatory Powers Act: Makes it illegal to intercept emails, phone calls, letters etc. without permission.
   • Health & Safety
     • Repetitive Strain Injury (RSI)
     • Backache from incorrect posture
     • Eyesight defects
     • Wires could trip somebody up
     • Risk of fire/electrocution
     • Heavy equipment might fall