Oxford Brookes University recognises that information and the associated processes, systems and networks are valuable assets and that the management of personal data has important implications for individuals. Through its security policies, procedures and structures, the University will facilitate the secure and uninterrupted flow of information, both within the University and in external communications. The University believes that security is an integral part of the information sharing which is essential to academic and corporate endeavour and the policies outlined below are intended to support information security measures throughout the University. A Code of Practice for Information Security Management.
Information exists in many forms.
It may be printed or written on paper, stored electronically, transmitted by post or using electronic means, shown on films, or spoken in conversation. Appropriate protection is required for all forms of information to ensure business continuity and to avoid breaches of the law and statutory, regulatory or contractual obligations. The University holds and processes information about employees, students, and other data subjects for academic, administrative and commercial purposes. Responsibilities under the 1998 Act are set out in the Data Protection Policy . The University believes that information security is the responsibility of all students and members of staff.