Welcome to Part 2 of the Information Governance Staff Handbook. In this section, we provide you with valuable and practical advice tailored to your specific roles and responsibilities.

Data Security:

• Always follow organisation policies to ensure the safety of information.
• Take physical measures to protect sensitive data.
• Practice safe password management, create strong and memorable passwords.
• Transfer information securely and responsibly.
• Report any security breaches promptly via the incident portal on the BrisDoc website.

Best Practices for You:

• Make sure to lock your PC when away from your desk.
• Be cautious about conversations being overheard by unauthorised individuals.
• Keep doors closed to restricted areas and verify visitors’ identity.
• Verify the recipient’s address before sending emails with confidential data.
• Beware of suspicious emails and avoid clicking on unknown links or attachments.
• Keep your Smartcard and password secure; report immediately if lost.
• Verify the caller’s identity before disclosing confidential information over the phone.
• Stay informed about information governance and complete relevant training annually.
• Report any information security incidents to the appropriate authority promptly.
• Be aware of risks in various scenarios, and always prioritise security measures.

Business Continuity:

• Business Continuity is essential for ensuring uninterrupted services to patients, regardless of unforeseen circumstances.
• Action plans are in place to address risks and loss of service, managed by Service Managers and Duty Managers.

Practical Tips for Your Role:

• Maintain patient privacy and confirm their details when speaking to them directly.
• Keep your desk tidy and reduce paper usage.
• Use strong and unique passwords; never share them.
• Report information security incidents via the incident reporting portal.
• Seek guidance from senior managers when uncertain about information-related issues.
• Familiarise yourself with the location of the Business Continuity box and its processes.

Summary:

• If you’re unsure, don’t hesitate to ask for guidance.
• Stay updated on Standard Operating Procedures (SoPs) relevant to your role.
• Keep your training up to date to ensure compliance and security.

By following these practical guidelines and remaining vigilant, you play a crucial role in upholding information governance principles and ensuring the safety and confidentiality of patient data. Thank you for your dedication to maintaining the highest standards of information security at BrisDoc.