Location via proxy:   [ UP ]  
[Report a bug]   [Manage cookies]                

CPNI Campaign2 - Checklist - FINAL LOW RES - EXTRANET

Download as pdf or txt
Download as pdf or txt
You are on page 1of 1

LINE MANAGER’S CHECKLIST

Here’s the thing about security….

1. IT COMES WITH THE JOB 7. LEAD FROM THE FRONT


Ensuring that your team behaves in a It’s important that you walk the walk and
security-conscious way is as much a part of don’t belittle security matters. Employees
your responsibilities as monitoring their need to see you employ good security
performance or looking after their welfare. practice in everything you do. So take the
lead and behave in the way you expect your
2. KNOW YOUR STAFF staff to behave.
Understanding the motivations and concerns
of your team will help you recognise when 8. DON’T WORRY, DON’T PANIC
there’s a problem and address any issues. Ensure you know how to handle a security
incident. Try and be confident when an-
3. EXPLAIN THE THREAT swering questions about security concerns
Don’t assume everyone knows why secu- and always show you’re taking the situa-
rity is important. Help them understand tion seriously.
the potential threats they face, the value
of your organisation’s assets and the con- 9. IT’S A TWO-WAY STREET
sequences of a breach. Gather feedback from staff – do they know
the threats, and the behaviour expected of
4. TELL THEM WHAT YOU EXPECT them? Do they have security-related ideas
OF THEM that you and others could try?
Check that employees understand and
can follow your organisation’s security 10. IT’S ALWAYS A LEARNING
procedures. Where relevant, don’t leave CURVE
briefings or training to another team – Security is an ever-evolving issue.
take charge of this yourself. Staff should be encouraged to own
up to mistakes. Learning about and
5. MAKE IT FEEL REAL understanding the implications of real-life
The best way to get someone to do examples can help all of the team.
something is to show them how it affects
them personally. Use case studies and 11. MANAGE ACCESS
tangible examples to keep briefings You may need help from IT on this. Keep
interesting and engaging. a record of employees’ access rights and
remember to close down that access when
6. KEEP KNOWLEDGE TOPPED UP they move on.
Security measures can change regularly in
response to evolving threats. In addition, 12. AND LASTLY…
staff working in new areas or new systems Remember that while it’s important you
may need a top-up security briefing. Keep keep your team aware of security matters,
your staff updated on changes to security maintaining security is ultimately down to
policies and ensure they receive a security the choices that individuals make.
briefing when they’re given access to new
systems, visit new sites or have been issued SECURITY IS EVERYONE’S BUSINESS.
with new devices.

TOGETHER, WE’VE GOT IT COVERED


© CROWN COPYRIGHT 2015 CPNI Security Behaviours Campaign: The role of line management

You might also like