Blog

GDPR and ISO 27001 are frameworks that together ensure robust data protection. ISO 27001 is an internationally recognised standard for information security, and the General Data Protection Regulation (GDPR), a broad set of rules designed to safeguard personal data across the UK and the European Economic Area. Together, these frameworks

The benefits of information governance are very large and very broad. Effective information governance is the foundation of an organisation’s ability to manage, protect, and use data. It encompasses the policies, procedures, and controls that ensure information is accurate, accessible, and secure while complying with legal and regulatory standards. Because

A good policy should be succinct, clear, user friendly, consistent with other policies, avoid duplication, assign responsibilities and enable delivery while setting out consequences of breaching the policy Policies are the backbone of any well-functioning organisation. They provide the framework for decision-making, guide behaviour, and establish a shared understanding of

Terms of reference (ToR) are pivotal in providing structure, purpose, and clarity to boards, committees, meetings, and groups. They act as the foundation document that defines their roles, responsibilities, reporting lines and operational framework. Without a well-defined ToR, organisations risk inefficiencies, miscommunication, and a lack of accountability. They also risk

What is the scope of the Freedom of Information Act 2000 (FOI Act)? The FOI Act promotes accountability and openness. the Act imposes clear obligations on organisations to disclose requested information, subject to certain exemptions. Central to its implementation is Section 6, which defines the applicability of the FOI Act