Procedures
Procedures is the first pillar of the Compliance & Assurance Framework and focuses on establishing good foundations for effective compliance through documentation. What do we need to do and why? How will we do it? Is it clear who is responsible for doing what?
Charter, Statutes, Ordinances, Regulations and Policies establish "what" & "why" at a University level. These documents are all overseen by the University's Governance and Academic Governance teams.
The University's Policy FrameworkLink opens in a new window provides guidance on the development, approval and publication of University policies.
Information Classification and Handling Standards form part of the Information Management Policy FrameworkLink opens in a new window. These standards help classify information based on its sensitivity into four levels: Public, Internal, Confidential, and Highly Confidential. They also provide examples of how to classify information for different activities, like storing information. You can read the detail of these standards via these links:
IMST 01: Information Classification Standard
IMST 03: Handling Information Standard
To request a team briefing, or ask any questions about these standards, please contact Esther Edun or Mark Camilletti from Information Risk and Compliance.
Codes of Practice, Standard Operating Procedures and Guidelines sit beneath these university level documents, providing the more detailed information on ‘how’ we do something as a university community.
Clear lines of responsibility and accountability should always be noted within these documents to provide clarity on exactly who is doing what within any processes that have been established. RACI tables should be developed wherever possible to clarify ownership.
The Compliance & Assurance team can support teams and departments to develop these documents or improve upon existing versions, where required. Please visit our Templates page for guidance.