Information Management Strategy.pdf - Lincolnshire Police

NOT PROTECTIVELY MARKEDviii) Compliance with the ACPO/ACPOS (2006) Community Security Policy(CSP);ix) Operating Rules for all force designated systems are available to all staff;x) Reporting lines exist to allow Business leads/ Department Heads to raiseissues to force information managers if necessary;xi) Reporting lines exist to allow force information managers to discussmatters (their own or those raised by Business leads /Department Heads)at ACPO level;xii) Systems and processes are sufficient to effectively co-ordinate all staffroles involved with the management of police information;xiii) Appropriate role/function is available to represent the force at namedforums.b) Overseeing:i) The management of all forces information assets and can demonstrateeffective linkages between the different functions e.g. IT, Data Protectionetc.ii) Management of freedom of information matters (including compliance withthe ACPO Freedom of Information Manual);iii) Compliance with the ACPO (2002) Community Security Policy (CSP);c) Supporting staff to share information appropriately.6.4 Senior Information Risk Owner (SIRO)6.4.1The appointment at board level of an information risk „champion‟ or Senior InformationRisk Owner (SIRO) is critical as it sends a clear message to the organisation that theownership of information risk is considered a strategic responsibility in the same way asfinancial and legal risks to the business are. The role of the SIRO or IA Champion is tounderstand how the strategic business goals of the organisation may be affected byfailures in the secure use of the organisation‟s information systems.a) The SIRO on behalf of the board is responsible for ensuring that:NOT PROTECTIVELY MARKED 37