ACS Assessor Guide - Security Industry Authority

ACS Assessor GuideSection 4 – Criterion Specific Guidelines: Criteria 5Criteria 5 – Resources5.1 An SIA Approved Contractor can demonstrate that it has effective management information systems for all aspects of its business with appropriateback-ups and contingencies.5.1.3 Adherence to the Data Protection Act 1998 is apparent.Required Achievement LevelCompliance with the DataProtection Act 1998 is evident inall aspects of the organisation’sbusiness, including notification tothe Information Commissionerwhere required.All aspects of the previouscolumn plus:All employees are made aware ofindividual responsibilities for dataprotection compliance, includingupdates where appropriate.All aspects of the previouscolumn plus:All employees receive trainingoutlining their individual andorganisational responsibilities fordata protection compliance,including updates.All aspects of the previouscolumn plus:The organisation conducts a riskassessment against the DataProtection Act and High Risk areashave additional controls.All aspects of theprevious column plus:Compliance with the dataprotection act is audited withICO guidance(See www.ico.gov.uk)Refresher training is conductedwhere appropriate.There are procedures in place tomonitor employee awareness oftheir own and the organisation’sresponsibilities for data protection.100The contents of this publication are copyright ©2013 Security Industry Authority, all rights reserved. No part of the contents may be reproduced or transmitted in any form, by any means without prior written permission of the copyright owner.