Dear Kirklees Borough Council,

I would like to know to what extent you have implemented data loss
prevention strategies and losses that you have incurred
specifically covering the following;

a) How many data losses have you incurred in the last 24 months
relating to the following

USB loss (to include data theft by employees as well as just lost
USB devices)
Email leakage (accidental and also malicious)
Laptop theft

To each of the above please provide an indication of what data was
lost or stolen and the estimated cost associated with that loss

b) What policies do you have in place surrounding

Encryption of data on Laptops, devices and email
Data transfer between departments and organisations under your
control/guidance
The use of removable storage devices

c) What tools have you implemented to help meet data protection
requirements to ensure that data is stored and transferred securely
and not kept longer than necessary?

d) What was the cost of these tools - initial licence cost and
ongoing support/maintenance contracts?

I look forward to receiving your response

Yours faithfully,

Louise Cooper

Freedom Info, Kirklees Borough Council

Thank you for your recent enquiry.

I have passed this onto the relevant service(s) and will contact you again once I have received their reply.

Yours sincerely

Information Access Team
e: [email address]

This email and any attachments are confidential. If you have received it in error - notify the sender immediately, delete it from your system, and do not use, copy or disclose the information in any way. Kirklees Council monitors all emails sent or received.

show quoted sections

Freedom Info, Kirklees Borough Council

3 Attachments

Dear Ms Cooper

I am writing in response to your Freedom of Information request dated 14
June 2011.  Please accept my apologies that this response is a day
late.

The Council's response to your specific questions is set out below:

I would like to know to what extent you have implemented data loss
prevention strategies and losses that you have incurred specifically
covering the following:

a) How many data losses have you incurred in the last 24 months
relating to the following:

· USB loss (to include data theft by employees as well as just
lost USB devices

· Email leakage (accidental and also malicious)

· Laptop theft

Please see the attached spreadsheet.

To each of the above please provide an indication of what data was lost or
stolen and the estimated cost associated with that loss

None

b) What policies do you have in place surrounding:

· Encryption of data on Laptops, devices and email Data
transfer between departments and organisations under your control /
guidance

· The use of removable storage devices

Please find attached:

· The Information Security Policy (February 2008).

· The draft updated Information Security Policy; this document
is a working draft which is being updated to take into account the
developments which have taken place since 2008

Both of these documents are available on the intranet for staff to refer
to.

All employees are required to accept the Information Security Policy on
login to the Council's network, and Assistant Directors are responsible
for the security of information within their respective service areas, and
ensure that appropriate performance management is in place.

c) What tools have you implemented to help meet data protection
requirements to ensure that data is stored and transferred securely and
not kept longer than necessary?

· Microsoft Active Directory

· SSL VPN

· IPSEC VPN

· Second factor authentication

· Encrypted USB sticks

· GCSX Service

· Secure file transfer

· Laptop encryption

d) What was the cost of these tools - initial licence cost and
ongoing support / maintenance contracts?

All expenditure over £500 is published on the council's website -
[1]http://www.kirklees.gov.uk/egov/opendata...

If you have any query regarding this request, please contact me. 
Please remember to quote the reference number above in any future
communications.

Yours sincerely

Information Access Team

Legal & Governance

Email: [2][email address]

Telephone: 01484 221744

Fax: 01484 221293

This email and any attachments are confidential. If you have received it
in error - notify the sender immediately, delete it from your system, and
do not use, copy or disclose the information in any way. Kirklees Council
monitors all emails sent or received.

References

Visible links
1. http://www.kirklees.gov.uk/egov/opendata...
2. mailto:[email address]

Looking for an EU Authority?

You can request documents directly from EU Institutions at our sister site AskTheEU.org . Find out more .

AskTheEU.org