Security Incidents and Breaches of the Agreement. 2.8.1 Security breaches, including misuse of MPS information, must be reported to the relevant Single Point of Contact (SPOC), Caldicott Guardian or Data Protection Officer (DPO) without undue delay of occurring/or no later than 24 hours after becoming aware of it. This is to allow the MPS to risk assess the security incident or breach of the Agreement, in circumstances where the security breach concerns MPS INFORMATION. A list of contacts can be found in Appendix G.
2.8.2 Where a security incident involves health or social care information, the NHS Digital Checklist Guidance for Reporting, Managing and Investigating Information Governance and Cyber Security Serious Incidents Requiring Investigation will be followed.
2.8.3 The MPS SPOC must immediately inform the Information Assurance Unit (IAU) of any security incident or breach of MPS information, including unauthorised disclosure or loss of information, by calling the department or emailing ‘IAU Mailbox - Security Incidents’. The [Insert relevant partner agency here] Contact must as soon as possible inform the [Insert relevant person or unit here] of another Signatory Organisation of any security incident or breach of [Insert relevant partner agency here] information, including unauthorised disclosure or loss of information originating from the other Signatory Organisation by calling the department or emailing [Insert relevant mailbox here].
2.8.4 Signatory Organisations confirm that security breaches are covered within their internal disciplinary procedures. If misuse is found, consideration will be given to facilitating an investigation into initiating criminal proceedings. All Signatory Organisations are aware that in extreme circumstances, non-compliance with the terms of this agreement may result in the agreement being suspended or terminated.
Security Incidents and Breaches of the Agreement. 2.10.1 Security breaches must be reported to the relevant Caldicott Guardian or Data Protection Officer within 24 hours of occurring / being detected. A list of contacts can be found in Appendix G.
2.10.2 Partner agencies, if you wish to feature a reporting procedure for a breach please complete as prompted below and embolden the text once complete, please duplicate for multiple agencies.
Security Incidents and Breaches of the Agreement. Non-compliance and/or breaches of security arrangements will be reported to The Partnership Organisation Business Crime Partnership manager and dealt with in accordance with their existing code of conduct between The Company and the stores within The Partnership. It is confirmed that security breaches (including misuse or unauthorised disclosure) are covered by the members of The Partnership’s internal disciplinary procedures. If misuse is found, there should be a mechanism to facilitate an investigation into initiating criminal proceedings. The Partnership Organisation management agree to fully support this investigation. Additionally, any security incidents, breaches, or newly identified vulnerabilities will be reported to the Data Protection Officer (DPO) for the police force and the signatory of this agreement. The signatories will ensure that the DPO is informed of any security incident(s) or breach(es) to this agreement, including unauthorised disclosure or loss of information, through The Police Force [include the internal and external contact details of the DPO and all relevant security departments]. All parties to this agreement are aware that non-compliance with the terms of this agreement may result in the agreement being suspended or terminated and the breach will be reported to the Information Commissioners Office who may carry out an investigation and proceed to take enforcement action including the imposition of administrative fines.
Security Incidents and Breaches of the Agreement. Security breaches (including misuse of police information) must be reported to the police SPOC (job title) within 24 hours of occurring / being detected. The nominated police individual must immediately inform the relevant Force Information Management / Security team of any security incident or breach of this agreement, including unauthorised disclosure or loss of information It is confirmed that security breaches (including misuse or unauthorised disclosure) are covered by the partner’s internal disciplinary procedures. If misuse is found there should be a mechanism to facilitate an investigation, including initiating criminal proceedings where necessary.
