ACS Assessor Guide - Security Industry Authority

ACS Assessor GuideSection 4 – Criterion Specific Guidelines: Criteria 55.1 An SIA Approved Contractor can demonstrate that it has effective management information systems for all aspects of its business with appropriateback-ups and contingencies.5.1.3 Adherence to the Data Protection Act 1998 is apparent.Clarification:The Assessor needs to be aware of the requirements of the Data Protection Act 1998 toensure the applicant organisation is compliant. www.businesslink.gov.uk andwww.ico.gov.uk provide a useful guide to the eight principles (rules) for data protectionand other relevant information such as training requirements.Ref: BS7858; BS7958; BS7960Example:The organisation publishes guidelines for employees on what information is retained by thecompany and what information may be released by employees.Linkages with other Indicators:5.1.1 Information key to the business has been identified and is produced and delivered in aneffective and timely manner to relevant employees and other stakeholders.5.1.2 Relevant versions of applicable documents are available at the point of use.5.1.4 Personnel records and other key information are maintained in accordance tolegislative requirements.7.1.1 Leaders can demonstrate, relevant to sector, knowledge of the legislative framework,common law, working practice, and industry standards/codes of practice.101The contents of this publication are copyright ©2013 Security Industry Authority, all rights reserved. No part of the contents may be reproduced or transmitted in any form, by any means without prior written permission of the copyright owner.