The widest possible definition of security will be used to include all types of incident that impact the effective use of information. This includes the performance, consistency, reliability, accuracy and timeliness of equipment, systems, and data. Principles 3.1 Approach Use all reasonable, appropriate, practical and effective security measures to protect important processes and assets in order to achieve the security objective. Code of Practice for Information Security Management as a framework for guiding the approach to managing security. Recognise the concepts of academic and individual freedom.
Freedom also requires responsibilities.
The needs of the individual will always be considered in the context of this security policy and the law. Continually examine ways in which security measures to protect and enhance our business can be improved. As a responsible organisation the University will protect and manage its information assets to enable it meet its contractual, legislative, privacy and ethical responsibilities. As a publicly funded organisation it is aware of the need to ensure public accountability and value for money. 3.2 Responsibilities Everyone granted access to Cardiff University s computer information systems is responsible for protecting its information assets, systems and infrastructure and will protect likewise the information assets of third parties whether such protection is required contractually, legally, ethically or out of respect for other individuals or organisations.