{"language":"en_GB","topic":{"id":"p66712i13","strTitle":"Protecting Information","screens":[{"id":"p66712i13s01","strTitle":"Introduction","objNormalBackgroundSrc":{"strSrc":""},"objBackgroundVideo":{"mp4":"","webm":""},"assets":[{"id":"p66712i13s01a01","layoutId":"p66712i13s01lay01","objVideoData":{"strSrc":"42564\/02_protecting-information_v004_1920x1080_compressed.mp4","strTranscriptText":"Institutions hold a lot of valuable information\n\nNot just information on our students... \n...but also on our staff, our day-to-day business, and our most valuable research data.\n\nStop and think: What might happen if... \n...this information fell into the wrong hands?\n\nThe identities of our students and staff could be compromised \nReputations and careers destroyed\n\nIt doesn't even take a calculated attack to lose data \n\nInternal incidents are a leading cause of data loss\n"},"active":1},{"id":"p66712i13s01a02","layoutId":"p66712i13s01lay01","strContent":"Select Play to begin. You can select the [b]Transcript[\/b] button to read what is being said. After watching the video, select [b]Transcript[\/b] to close the transcript.","active":1},{"id":"p66712i13s01a03","layoutId":"p66712i13s01lay01","strContent":"Select the [b]Replay[\/b] button to watch the video again, or scroll down to continue.","active":1}],"extras":{"objNavigationConfiguration":{}},"subscreens":[],"active":1},{"id":"p66712i13s02","strTitle":""It happened to me..." Lucy's Story","objNormalBackgroundSrc":{"strSrc":""},"objBackgroundVideo":{"mp4":"","webm":""},"assets":[{"id":"p66712i13s02a01","layoutId":"p66712i13s02lay00","objVideoData":{"strSrc":"42564\/161114_16-415_Topic2_FineCut.mp4","strTranscriptText":"Lucy:\nI could lose my job... I still can't quite believe it. I mean, you know it could happen, it's there in the back of your mind, but you don't expect it to happen to you, do you?\n\nI only left the office for a moment. I hadn't picked up my swipe card so I left the door on the latch.\n\nI mean, usually Maggie would be in the office with me but she was out on lunch. The office is never really left unattended so I don't know why it happened. I mean, they could have been watching me, but it was just such an opportunist thing to do.\n\nSomeone went in there while I was at the photocopier and took Maggie's laptop.\n\nShe'd been having some trouble with it lately, so she'd left it unlocked, knowing that I would be in the room anyway.\n\nWe were both working on the accomodation lists for the next enrolment. Creating mailing lists for applicants to inform them of their designated Halls of Residence.\n\nAll the students...all the addresses, it's all in the hands of the thief. I just hope they only wanted the laptop and that they erase the data. I mean, we've got the daughter of a celebrity enrolling this year and her address was in there too.\n\nOf course, Maggie and I are both due before our manager for a disciplinary hearing. But I'm sure the University will have to take the matter further than that.\n\nI haven't really slept properly since, and I know Maggie is worried about her job too. Every morning I expect to see something about it in the papers."},"active":1},{"id":"p66712i13s02a02","layoutId":"p66712i13s02lay00","strContent":"You can select the [b]Transcript[\/b] button to read what is being said. After watching the video, select [b]Transcript[\/b] to close the transcript.","active":1},{"id":"p66712i13s02a03","layoutId":"p66712i13s02lay00","strContent":"Select the [b]Replay[\/b] button to watch the video again, or scroll down to continue.","active":1}],"extras":{"objNavigationConfiguration":{}},"subscreens":[],"active":1},{"id":"p66712i13s03","strTitle":"Consequences and why it matters","objNormalBackgroundSrc":{"strSrc":"42564\/p20825i17s03.jpg"},"objBackgroundVideo":{"mp4":"","webm":""},"assets":[{"id":"p66712i13s03a01","layoutId":"p66712i13s03lay01","strContent":"Though not all data security incidents will lead to the loss or theft of information, they will expose information to unwanted risk.\n\nA full data security breach will involve a known disclosure or inappropriate access to information, which is a more serious incident. Any data security incident could potentially be disastrous for both you and the institution.","active":1},{"id":"p66712i13s03a02","layoutId":"p66712i13s03lay01","strContent":"Select each image to find out more.","active":1},{"id":"p66712i13s03a03","layoutId":"p66712i13s03lay01","objNormalSrc":{"strSrc":"42564\/p20825i17s03a04_n.png","strAltText":""},"objActiveSrc":{"strSrc":"42564\/p20825i17s03a04_h.png"},"objVisitedSrc":{"strSrc":"42564\/p20825i17s03a04_v.png"},"arrHotspots":[{"strText":"An older lady with a smart brief in her hands.","objCoords":{"intTop":16,"intLeft":0,"intWidth":303,"intHeight":317}},{"strText":"A modern Institution with students in the foreground.","objCoords":{"intTop":20,"intLeft":331,"intWidth":310,"intHeight":314}},{"strText":"One female and one male student sat together, smiling.","objCoords":{"intTop":13,"intLeft":643,"intWidth":317,"intHeight":319}}],"active":1},{"id":"p66712i13s03a04","layoutId":"p66712i13s03lay01","strContent":"Consequences and why it matters","active":1},{"id":"p66712i13s03a05","layoutId":"p66712i13s03lay01","objNormalSrc":{"strSrc":"42564\/p20825i17s03a04_n_tablet.png","strAltText":""},"objActiveSrc":{"strSrc":"42564\/p20825i17s03a04_h_tablet.png"},"objVisitedSrc":{"strSrc":"42564\/p20825i17s03a04_v_tablet.png"},"arrHotspots":[{"strText":"","objCoords":{"intTop":11,"intLeft":130,"intWidth":237,"intHeight":226}},{"strText":"###INSERT TITLE###","objCoords":{"intTop":253,"intLeft":130,"intWidth":235,"intHeight":241}},{"strText":"###INSERT TITLE###","objCoords":{"intTop":508,"intLeft":129,"intWidth":244,"intHeight":237}}],"active":1}],"extras":{"objNavigationConfiguration":{}},"subscreens":[{"id":"p66712i13s03sub01","strTitle":"You","assets":[{"id":"p66712i13s03sub01a01","layoutId":"p66712i13s03sub01lay00","strContent":"[b]You[\/b]\n\nHow would you feel if it was your personal data in the wrong hands, or if the newspapers printed your name in relation to a major security breach? Your reputation and\/or your own personal data could be affected.\n\nYou are both responsible and accountable for the data you work with in your role. IT Services and security software can only do their job if we are all vigilant. The University has put in place policies and procedures to help protect information and systems. Everyone must comply with these at all times.","active":1},{"id":"p66712i13s03sub01a02","layoutId":"p66712i13s03sub01lay00","strContent":"Select another image.","active":1},{"id":"p66712i13s03sub01a03","layoutId":"p66712i13s03sub01lay00","strContent":"Scroll down to continue.","active":1}],"extras":{"scalar":""},"subscreens":[],"active":1},{"id":"p66712i13s03sub02","strTitle":"The University","assets":[{"id":"p66712i13s03sub02a01","layoutId":"p66712i13s03sub02lay00","strContent":"[b]The institution[\/b]\n\nThe institution is dependent on information for everything it does and people trust us with their information. We must maintain that trust.\n\nFailure to protect information would have an impact on both individuals and the institution.\n\nWe have a legal requirement to protect information. Failure to do so could harm our reputation, create future distrust with both applicants and potential business contacts, see our admission levels decrease or even result in a large fine.","active":1},{"id":"p66712i13s03sub02a02","layoutId":"p66712i13s03sub02lay00","strContent":"Select another image.","active":1},{"id":"p66712i13s03sub02a03","layoutId":"p66712i13s03sub02lay00","strContent":"Scroll down to continue.","active":1}],"extras":{"scalar":""},"subscreens":[],"active":1},{"id":"p66712i13s03sub03","strTitle":"The Students","assets":[{"id":"p66712i13s03sub03a01","layoutId":"p66712i13s03sub03lay00","strContent":"[b]The students[\/b]\n\nThe loss or theft of personal data held on our students could lead to a number of complications depending on the information lost. Personal, medical and financial information is just some of the data we hold that would be of great interest to third parties if it fell into the wrong hands. The misuse of this information could cause severe damage or distress to the students affected.","active":1},{"id":"p66712i13s03sub03a02","layoutId":"p66712i13s03sub03lay00","strContent":"Select another image.","active":1},{"id":"p66712i13s03sub03a03","layoutId":"p66712i13s03sub03lay00","strContent":"Scroll down to continue.","active":1}],"extras":{"scalar":""},"subscreens":[],"active":1}],"active":1},{"id":"p66712i13s04","strTitle":"Why would a university be targeted?","objNormalBackgroundSrc":{"strSrc":"42564\/p20825i17s04.jpg"},"objBackgroundVideo":{"mp4":"","webm":""},"assets":[{"id":"p66712i13s04a01","layoutId":"p66712i13s04lay00","strContent":"Universities hold a great deal of information that could be exploited if it gets into the wrong hands. This information includes personal details and research data.","active":1},{"id":"p66712i13s04a02","layoutId":"p66712i13s04lay00","strContent":"Select each type of data to view examples of what may happen.","active":1},{"id":"p66712i13s04a03","layoutId":"p66712i13s04lay00","arrHottext":[{"strText":"Personal details","arrActions":[{"strActionType":"showSubScreen","strActionGroup":"subscreen","objParameters":{"strSubScreenID":"p66712i13s04sub01","booAssetOwnedSubscreen":false},"strObjectType":"action"}]},{"strText":"Research data","arrActions":[{"strActionType":"showSubScreen","strActionGroup":"subscreen","objParameters":{"strSubScreenID":"p66712i13s04sub02","booAssetOwnedSubscreen":false},"strObjectType":"action"}]}],"active":1},{"id":"p66712i13s04a04","layoutId":"p66712i13s04lay00","strContent":"Why would a university be targeted?","active":1}],"extras":{"objNavigationConfiguration":{}},"subscreens":[{"id":"p66712i13s04sub01","strTitle":"Personal Details","assets":[{"id":"p66712i13s04sub01a01","layoutId":"p66712i13s04sub01lay00","strContent":"The loss or theft of personal details, such as your name, date of birth and address, could lead to your bank accounts being compromised or credit agreements being set up in your name.\n\nUniversities typically hold the personal details of thousands of students and staff, making them tempting targets for criminals.","active":1},{"id":"p66712i13s04sub01a02","layoutId":"p66712i13s04sub01lay00","strContent":"Select another type of data.","active":1},{"id":"p66712i13s04sub01a03","layoutId":"p66712i13s04sub01lay00","strContent":"Scroll down to continue.","active":1}],"extras":{"scalar":""},"subscreens":[],"active":1},{"id":"p66712i13s04sub02","strTitle":"Research Data","assets":[{"id":"p66712i13s04sub02a01","layoutId":"p66712i13s04sub02lay00","strContent":"Research data is Intellectual Property, even though it may contain additional confidential information, such as medical records. Much of the information collected will be confidential, which may be valuable to potential thieves. \n ","active":1},{"id":"p66712i13s04sub02a02","layoutId":"p66712i13s04sub02lay00","strContent":"Select another type of data.","active":1},{"id":"p66712i13s04sub02a03","layoutId":"p66712i13s04sub02lay00","strContent":"Scroll down to continue.","active":1}],"extras":{"scalar":""},"subscreens":[],"active":1}],"active":1},{"id":"p66712i13s05","strTitle":"Legislation, Policies and Procedures","objNormalBackgroundSrc":{"strSrc":"42564\/p20825i17s05.jpg"},"objBackgroundVideo":{"mp4":"","webm":""},"assets":[{"id":"p66712i13s05a01","layoutId":"p66712i13s05lay00","strContent":"[b]Legislation, Policies and Procedures[\/b]","active":1},{"id":"p66712i13s05a02","layoutId":"p66712i13s05lay00","strContent":"While it is down to you to take personal responsibility, there are also laws and regulations that exist to protect and manage information, which you need to be aware of.","active":1},{"id":"p66712i13s05a03","layoutId":"p66712i13s05lay00","strContent":"Select each heading to find out more.","active":1},{"id":"p66712i13s05a04","layoutId":"p66712i13s05lay00","arrHottext":[{"strText":"Legislation","arrActions":[{"strActionType":"showSubScreen","strActionGroup":"subscreen","objParameters":{"strSubScreenID":"p66712i13s05sub01","booAssetOwnedSubscreen":false},"strObjectType":"action"}]},{"strText":"Policies and Procedures","arrActions":[{"strActionType":"showSubScreen","strActionGroup":"subscreen","objParameters":{"strSubScreenID":"p66712i13s05sub02","booAssetOwnedSubscreen":false},"strObjectType":"action"}]}],"active":1}],"extras":{"objNavigationConfiguration":{}},"subscreens":[{"id":"p66712i13s05sub01","strTitle":"Legislation","assets":[{"id":"p66712i13s05sub01a01","layoutId":"p66712i13s05sub01lay00","strContent":"The key pieces of legislation in this area are the General Data Protection Regulation (GDPR), the Data Protection Act 2018 the Computer Misuse Act 1990 (Amended 2006), the Freedom of Information Act 2000 and the Environmental Information Regulations 2004.\n\nThe GDPR applies to all EU member states and the UK (and continues to do so post-Brexit) and outlines how organisations need to manage people's personal data and what we can and can't do with it, including having adequate security and procedures in place. It also establishes the rights that individuals have regarding their personal data.\n\nThe 2018 version of the UK Data Protection Act complements the GDPR and introduces a limited number of additional regulations around protecting personal data. \n\nThe Computer Misuse Act 1990 aims to keep data protected from unauthorised access or modification of computer material.\n\nThe Freedom of Information Act and the Environmental Information Regulations govern our obligations to release information on request.","active":1},{"id":"p66712i13s05sub01a02","layoutId":"p66712i13s05sub01lay00","strContent":"Select another heading.","active":1},{"id":"p66712i13s05sub01a03","layoutId":"p66712i13s05sub01lay00","strContent":"Scroll down to continue.","active":1}],"extras":{"scalar":""},"subscreens":[],"active":1},{"id":"p66712i13s05sub02","strTitle":"Policies and Procedures","assets":[{"id":"p66712i13s05sub02a01","layoutId":"p66712i13s05sub02lay00","strContent":"Your organisation has a number of policies relating to information security. You should make sure you're familiar with them as these deal with all aspects of information management, but their main aim is protecting information.\n\nYour institution may also monitor network usage and computer usage (as defined within the law) as a means to protect information and ensure that usage complies with legal and policy requirements. Please refer to your institution's Policy or ask your manager or supervisor where this can be found.","active":1},{"id":"p66712i13s05sub02a02","layoutId":"p66712i13s05sub02lay00","strContent":"Select another heading.","active":1},{"id":"p66712i13s05sub02a03","layoutId":"p66712i13s05sub02lay00","strContent":"Scroll down to continue.","active":1}],"extras":{"scalar":""},"subscreens":[],"active":1}],"active":1},{"id":"p66712i13s06","strTitle":"The 7 Principles of GDPR","objNormalBackgroundSrc":{"strSrc":"42564\/p20825i17s06.jpg"},"objBackgroundVideo":{"mp4":"","webm":""},"assets":[{"id":"p66712i13s06a01","layoutId":"p66712i13s06lay00","strContent":"The General Data Protection Regulation (GDPR) sets out seven key principles that must be adhered to when processing personal data:","active":1},{"id":"p66712i13s06a02","layoutId":"p66712i13s06lay00","strContent":"Select each principle to find out more.","active":1},{"id":"p66712i13s06a03","layoutId":"p66712i13s06lay00","arrHottext":[{"strText":"Lawfulness, fairness and transparency","arrActions":[{"strActionType":"showSubScreen","strActionGroup":"subscreen","objParameters":{"strSubScreenID":"p66712i13s06sub01","booAssetOwnedSubscreen":false},"strObjectType":"action"}]},{"strText":"Purpose limitation","arrActions":[{"strActionType":"showSubScreen","strActionGroup":"subscreen","objParameters":{"strSubScreenID":"p66712i13s06sub02","booAssetOwnedSubscreen":false},"strObjectType":"action"}]},{"strText":"Data minimisation","arrActions":[{"strActionType":"showSubScreen","strActionGroup":"subscreen","objParameters":{"strSubScreenID":"p66712i13s06sub03","booAssetOwnedSubscreen":false},"strObjectType":"action"}]},{"strText":"Accuracy","arrActions":[{"strActionType":"showSubScreen","strActionGroup":"subscreen","objParameters":{"strSubScreenID":"p66712i13s06sub04","booAssetOwnedSubscreen":false},"strObjectType":"action"}]},{"strText":"Storage limitation","arrActions":[{"strActionType":"showSubScreen","strActionGroup":"subscreen","objParameters":{"strSubScreenID":"p66712i13s06sub05","booAssetOwnedSubscreen":false},"strObjectType":"action"}]},{"strText":"Integrity and confidentiality (security)","arrActions":[{"strActionType":"showSubScreen","strActionGroup":"subscreen","objParameters":{"strSubScreenID":"p66712i13s06sub06","booAssetOwnedSubscreen":false},"strObjectType":"action"}]},{"strText":"Accountability","arrActions":[{"strActionType":"showSubScreen","strActionGroup":"subscreen","objParameters":{"strSubScreenID":"p66712i13s06sub07","booAssetOwnedSubscreen":false},"strObjectType":"action"}]}],"active":1},{"id":"p66712i13s06a04","layoutId":"p66712i13s06lay00","strContent":"The 7 Principles of GDPR","active":1}],"extras":{"objNavigationConfiguration":{}},"subscreens":[{"id":"p66712i13s06sub01","strTitle":"Lawfulness, fairness and transparency","assets":[{"id":"p66712i13s06sub01a01","layoutId":"p66712i13s06sub01lay00","strContent":"The first principle of the GDPR is that personal data should be processed lawfully, fairly and in a transparent manner. Practically this means that you must:\n[list]\n[*]Have legitimate reasons for collecting and using personal data\n[*]Consider how processing may affect the individuals concerned and ensure they will not be harmed as a result of your use of their data\n[*]Handle people's personal data reasonably and legally\n[*]Be clear about how you intend to use the data \n[\/list]\nThere may be some role-specific exemptions to this, especially if you are a researcher. Further information is available from the Institution's Data Protection Officer.\n ","active":1},{"id":"p66712i13s06sub01a02","layoutId":"p66712i13s06sub01lay00","strContent":"Select another principle.","active":1},{"id":"p66712i13s06sub01a03","layoutId":"p66712i13s06sub01lay00","strContent":"Scroll down to continue.","active":1}],"extras":{"scalar":""},"subscreens":[],"active":1},{"id":"p66712i13s06sub02","strTitle":"Purpose limitation","objNormalBackgroundSrc":{"strSrc":""},"objBackgroundVideo":{"mp4":"","webm":""},"assets":[{"id":"p66712i13s06sub02a01","layoutId":"p66712i13s06sub02lay00","strContent":"The second principle of the GDPR states that personal data should be "collected for specified, explicit and legitimate purposes".\n\nOrganisations must be clear about what the purposes for processing are from the start. The purposes should be documented and disclosed to individuals in privacy notices or statements.\n\nThe collected data can only be used for a new purpose if it is compatible with the original purpose, or if specific consent for the new purpose is gained.\n ","active":1},{"id":"p66712i13s06sub02a02","layoutId":"p66712i13s06sub02lay00","strContent":"Select another principle.","active":1},{"id":"p66712i13s06sub02a03","layoutId":"p66712i13s06sub02lay00","strContent":"Scroll down to continue.","active":1}],"extras":{"scalar":""},"subscreens":[],"active":1},{"id":"p66712i13s06sub03","strTitle":"Data minimisation","assets":[{"id":"p66712i13s06sub03a01","layoutId":"p66712i13s06sub03lay00","strContent":"The third principle of the GDPR is that personal data you are processing should be:\n[list]\n[*]Adequate - sufficient to properly fulfil your stated purpose\n[*]Relevant - has a rational link to that purpose\n[*]Limited to what is necessary - you do not hold more than you need for that purpose\n[\/list]\n","active":1},{"id":"p66712i13s06sub03a02","layoutId":"p66712i13s06sub03lay00","strContent":"Select another principle.","active":1},{"id":"p66712i13s06sub03a03","layoutId":"p66712i13s06sub03lay00","strContent":"Scroll down to continue.","active":1}],"extras":{"scalar":""},"subscreens":[],"active":1},{"id":"p66712i13s06sub04","strTitle":"Accuracy","assets":[{"id":"p66712i13s06sub04a01","layoutId":"p66712i13s06sub04lay00","strContent":"The fourth principle of the GDPR is that personal data should be accurate and, where necessary, kept up to date.  In practice, this means you must:\n[list]\n[*]Take reasonable steps to ensure the accuracy of personal data\n[*]Ensure that the source and status of personal data is clear\n[*]Carefully consider any challenges to the accuracy of information\n[*]Consider whether it is necessary to periodically update the information\n[\/list]\n","active":1},{"id":"p66712i13s06sub04a02","layoutId":"p66712i13s06sub04lay00","strContent":"Select another principle.","active":1},{"id":"p66712i13s06sub04a03","layoutId":"p66712i13s06sub04lay00","strContent":"Scroll down to continue.","active":1}],"extras":{"scalar":""},"subscreens":[],"active":1},{"id":"p66712i13s06sub05","strTitle":"Storage limitation","assets":[{"id":"p66712i13s06sub05a01","layoutId":"p66712i13s06sub05lay00","strContent":"The fifth principle of the GDPR is that personal data must not be kept longer than is needed. You must:\n[list]\n[*]Not keep personal data for longer than you need it.\n[*]Think about – and be able to justify – how long you keep personal data. This will depend on your purposes for holding the data.\n[*]Have a policy setting standard retention periods wherever possible, to comply with documentation requirements.\n[*]Periodically review the data you hold, and erase or anonymise it when you no longer need it.\n[*]Carefully consider any challenges to your retention of data. Individuals have a right to erasure if you no longer need the data.\n[*]You can keep personal data for longer if you are only keeping it for public interest archiving, scientific or historical research, or statistical purposes.\n[\/list]\n","active":1},{"id":"p66712i13s06sub05a02","layoutId":"p66712i13s06sub05lay00","strContent":"Select another principle.","active":1},{"id":"p66712i13s06sub05a03","layoutId":"p66712i13s06sub05lay00","strContent":"Scroll down to continue.","active":1}],"extras":{"scalar":""},"subscreens":[],"active":1},{"id":"p66712i13s06sub06","strTitle":"Integrity and confidentiality (security)","assets":[{"id":"p66712i13s06sub06a01","layoutId":"p66712i13s06sub06lay00","strContent":"The integrity and confidentiality principle, also known as the security principle, requires that appropriate security measures are in place to protect personal data. In particular you must:\n[list]\n[*]Design and organise your security to fit the nature of the personal data you hold and the potential harm that may result from a security breach\n[*]Be clear about who is responsible for ensuring information security\n[*]Make sure you have the right physical and technical security, backed up by robust policies and procedures and reliable, well-trained staff\n[*]Be ready to respond to any breach of security swiftly and effectively\n[\/list]\n","active":1},{"id":"p66712i13s06sub06a02","layoutId":"p66712i13s06sub06lay00","strContent":"Select another principle.","active":1},{"id":"p66712i13s06sub06a03","layoutId":"p66712i13s06sub06lay00","strContent":"Scroll down to continue.","active":1}],"extras":{"scalar":""},"subscreens":[],"active":1},{"id":"p66712i13s06sub07","strTitle":"Accountability","assets":[{"id":"p66712i13s06sub07a01","layoutId":"p66712i13s06sub07lay00","strContent":"The accountability principle requires you to take responsibility for what you do with personal data and how you comply with the other principles.  Appropriate technical and organisational measures need to be taken to ensure compliance, such as:\n[list]\n[*]Adopting and implementing data protection policies\n[*]Taking a "data protection by design and default" approach\n[*]Putting written contracts in place with organisations that process personal data on your behalf\n[*]Recording and, where necessary, reporting personal data breaches\n[\/list]\n","active":1},{"id":"p66712i13s06sub07a02","layoutId":"p66712i13s06sub07lay00","strContent":"Select another principle.","active":1},{"id":"p66712i13s06sub07a03","layoutId":"p66712i13s06sub07lay00","strContent":"Scroll down to continue.","active":1}],"extras":{"scalar":""},"subscreens":[],"active":1}],"active":1},{"id":"p66712i13s07","strTitle":"Reporting an Incident","objNormalBackgroundSrc":{"strSrc":"42564\/p20825i17s07.jpg"},"objBackgroundVideo":{"mp4":"","webm":""},"assets":[{"id":"p66712i13s07a01","layoutId":"p66712i13s07lay00","strContent":"When you get back from lunch one afternoon, you notice two workmen packing computer equipment into crates. You ask your colleague if they know what is going on. "No idea," he replies, "No-one tells us anything." You get back to work and when you look up half an hour later, the men and the crates have gone.\n\nWhat should you do?","active":1},{"id":"p66712i13s07a02","layoutId":"p66712i13s07lay00","strContent":"Select ONE option. Then select Confirm.","active":1},{"id":"p66712i13s07a03","layoutId":"p66712i13s07lay00","arrOptions":[{"strOptionText":"Nothing. They seemed to know what they were doing, it must have been legitimate.","arrOptionFeedbackActions":[{"strActionType":"showSubScreen","strActionGroup":"subscreen","objParameters":{"strSubScreenID":"p66712i13s07sub02","booAssetOwnedSubscreen":false},"strObjectType":"action"}]},{"strOptionText":"Speak to IT Services immediately","arrOptionFeedbackActions":[{"strActionType":"showSubScreen","strActionGroup":"subscreen","objParameters":{"strSubScreenID":"p66712i13s07sub01","booAssetOwnedSubscreen":false},"strObjectType":"action"}]}],"arrFirstIncorrectActions":[],"active":1},{"id":"p66712i13s07a04","layoutId":"p66712i13s07lay00","strContent":"Reporting an Incident","active":1}],"extras":{"objNavigationConfiguration":{}},"subscreens":[{"id":"p66712i13s07sub01","strTitle":"Correct","assets":[{"id":"p66712i13s07sub01a01","layoutId":"p66712i13s07sub01lay00","strContent":"That's right.\n\nYou must report all suspicious or potentially suspicious activity. If you are unsure who to report to exactly, ask your manager or refer to your institution's Information Security Policy.\n\nReporting incidents is essential if we are to keep our premises secure. Imagine how you would feel if you didn't report something you saw and later found that it had lead to a theft or other security-related incident. Don't leave it to someone else.","active":1},{"id":"p66712i13s07sub01a02","layoutId":"p66712i13s07sub01lay00","strContent":"Scroll down to continue.","active":1}],"extras":{"scalar":""},"subscreens":[],"active":1},{"id":"p66712i13s07sub02","strTitle":"Incorrect","assets":[{"id":"p66712i13s07sub02a01","layoutId":"p66712i13s07sub02lay00","strContent":"That's not right.\n\nYou must report all suspicious or potentially suspicious activity. If you are unsure who to report to exactly, ask your manager or refer to your institution's Information Security Policy.\n\nReporting incidents is essential if we are to keep our premises secure. Imagine how you would feel if you didn't report something you saw and later found that it had lead to a theft or other security-related incident. Don't leave it to someone else.","active":1},{"id":"p66712i13s07sub02a02","layoutId":"p66712i13s07sub02lay00","strContent":"Scroll down to continue.","active":1}],"extras":{"scalar":""},"subscreens":[],"active":1}],"active":1},{"id":"p66712i13s08","strTitle":"Summary","objNormalBackgroundSrc":{"strSrc":"42564\/p20825i17s08.jpg"},"objBackgroundVideo":{"mp4":"","webm":""},"assets":[{"id":"p66712i13s08a01","layoutId":"p66712i13s08lay00","strContent":"As you have seen in this topic, we hold a lot of data across our business as a whole. Not all of it is student data, which is often confidential.\n\nThere are many ways in which data may be lost, both electronically and physically. The risks continue to increase as we utilise more and more devices, apps and software.\n\nWe must all remain vigilant, reporting potential incidents before they occur, creating a culture of protect and prevent instead of learning from events after it's too late.\n\nTake responsibility for your equipment and your data, and protect your password. If an incident occurs, make sure you inform IT Services and your manager immediately.\n\nRemember that we are bound by legislation, laws and policies, including the General Data Protection Regulation, which means that a security breach or loss of data can result in legal action and fines.","active":1},{"id":"p66712i13s08a02","layoutId":"p66712i13s08lay00","strContent":"Select the [b]Home button[\/b] to start another section.","active":1},{"id":"p66712i13s08a03","layoutId":"p66712i13s08lay00","strContent":"Protecting information","active":1},{"id":"p66712i13s08a04","layoutId":"p66712i13s08lay00","strContent":"Summary","active":1}],"extras":{"objNavigationConfiguration":{}},"subscreens":[],"active":1},{"id":"p66712i13s09","strTitle":""It happened to me..." Lucy's Story","objNormalBackgroundSrc":{"strSrc":"42564\/p20825i17s02.jpg"},"objBackgroundVideo":{"mp4":"","webm":""},"assets":[{"id":"p66712i13s09a01","layoutId":"p66712i13s09lay00","strContent":"Lucy works for the Student Housing department. Find out how she found out the hard way that the slightest lapse in judgement can lead to theft.","active":1},{"id":"p66712i13s09a02","layoutId":"p66712i13s09lay00","strContent":"Select [b]Play[\/b] to hear Lucy's story.","active":1},{"id":"p66712i13s09a03","layoutId":"p66712i13s09lay00","strContent":""It happened to me..." Lucy's Story","active":1}],"extras":{"objNavigationConfiguration":{}},"subscreens":[],"active":1}],"active":true}}