Ohjeistukset tiedonhallintatyöhön

The organization must have up-to-date information security guidelines and training available to ensure adequate awareness with them. The guidelines must take into account:

• Handling of information materials in operational processes
• Secure use of data systems
• Determining data processing rights for information systems and the data stores and materials they contain
• The grounds for granting access rights and who is responsible for granting them
• How and whose responsibility it is to respond to requests for information
• Guidelines for preparing for unusual situations

You should pay attention when preparing the guidelines to the quality and comprehensibility of the guidelines.