network, website or system may be used and sets guidelines as to how it should be used. AUP documents are written often to reduce the potential for legal action. AUPs are an integral part of the framework of information security policies; it is best practice to ask new organisation members to sign an AUP before given access to IT. This document focuses on education, so should be amended for local authorities or commercial organisations. Please amend in a manner that suits your Organisation. We suggest replacing “Organisation”, then read again to ensure it imparts intended meaning. IT Acceptable Use Policy (AUP) What you may and may not do when you use the Organisation's IT systems, and the consequences of breaking the Introduction It is the responsibility of all of the Organisation’s IT services to read and understand this policy. This policy may be updated from time to time, in order to comply with legal and policy requirements. 1.1 Purpose This AUP is intended to provide a framework for use of the Organisation's IT resources. It should be interpreted such that it has the widest application and so as to include new and developing technologies and uses, which may not be explicitly referred to. 1.2 Policy This AUP is taken to include the JANET AUP and the JANET Security Policy published by JANET (UK), the Combined Higher Education Software Team (CHEST) User Obligations, together with its associated Copyright Acknowledgement, and the Eduserv General Terms of Service. The Organisation also has a statutory duty, under Section 26 of the Counter Terrorism and Security Act 2015, termed “PREVENT”. The purpose of this duty is to aid the process of preventing people being drawn into terrorism. 1.3 Scope Members of the Organisation and all other users (staff, students, visitors, contractors and others) of the Organisation's facilities are bound by the provisions of its policies in addition to this AUP. The Organisation seeks to promote and facilitate the positive and extensive use of IT in the interests of supporting the delivery of learning, teaching, and innovation to the highest possible standards. This also requires appropriate and legal use of the technologies and facilities made available to students, staff and partners of the Organisation.
The School has considered the need for CCTV and has decided it is required for the prevention and detection of crime and for protecting the safety of the school’s community. It will not be used for other purposes. The school will conduct regular reviews of its use of CCTV. Checked (Date if appropriate) By Date of next review Notification has been submitted to the Information Commissioner and the next renewal date recorded. Yes. There is named individual who is responsible for the operation of the system. Yes. A system had been chosen which produces clear images which the law enforcement bodies (usually the police) can use to investigate crime and these can easily be taken from the system when required. Yes. and members of the school community will be consulted about any proposal to install / amend CCTV equipment or its use as appropriate. Yes. Cameras have been sited so that they provide clear images. Yes. Where possible, cameras have been positioned to avoid capturing the images of persons not visiting the premises. Yes. There are visible signs showing that CCTV is in operation. Where it is not obvious who is responsible for the system contact details are displayed on the sign(s). Yes. Images from this CCTV system are securely stored, where only a limited number of authorised persons may have access to them. Yes. The recorded images will only be retained long enough for any incident to come to light (e.g. for a theft to be noticed) and the incident to be investigated. Yes. Except where individually authorised, images have not been provided to third parties. Yes. The organisation has a policy for how to respond to individuals making requests for copies of their own images. If unsure the data controller knows to seek advice from the Data Protection Officer at Satswana Ltd. Yes Regular checks are carried out to ensure that the system is working properly and produces high quality images. Yes. checks) CCTV Signage It is a requirement of the General Data Protection Regulation to notify people entering a CCTV protected area that the area is monitored by CCTV and that pictures are recorded. The school is to ensure that this requirement is fulfilled.