[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"detail-sidebar-cat-1-en-105":3,"doc-seo-244302-105":53,"doc-detail-244302-en":127},{"code":4,"msg":5,"data":6},0,"success",[7,14,19,24,29,34,39,44,49],{"id":8,"doc_module":9,"doc_module_name":10,"category_name":11,"show_sort_weight":12,"slug":13},11,1,"Template","Presentations",90,"presentations",{"id":15,"doc_module":9,"doc_module_name":10,"category_name":16,"show_sort_weight":17,"slug":18},12,"Resumes",80,"resumes",{"id":20,"doc_module":9,"doc_module_name":10,"category_name":21,"show_sort_weight":22,"slug":23},14,"Invoices",70,"invoices",{"id":25,"doc_module":9,"doc_module_name":10,"category_name":26,"show_sort_weight":27,"slug":28},15,"Posters",60,"posters",{"id":30,"doc_module":9,"doc_module_name":10,"category_name":31,"show_sort_weight":32,"slug":33},16,"Social Media",50,"social-media",{"id":35,"doc_module":9,"doc_module_name":10,"category_name":36,"show_sort_weight":37,"slug":38},17,"Forms",40,"forms",{"id":40,"doc_module":9,"doc_module_name":10,"category_name":41,"show_sort_weight":42,"slug":43},18,"Letters",30,"letters",{"id":45,"doc_module":9,"doc_module_name":10,"category_name":46,"show_sort_weight":47,"slug":48},21,"Paper Templates",5,"papers-templates",{"id":50,"doc_module":9,"doc_module_name":10,"category_name":51,"show_sort_weight":4,"slug":52},158,"General","general-158",{"code":4,"msg":54,"data":55},"ok",{"site_id":56,"language":57,"slug":58,"title":59,"keywords":60,"description":61,"schema_data":62,"social_meta":120,"head_meta":122,"extra_data":124,"updated_unix":126},105,"en","cyber-security-policy-contingency-and-access-controls","Cyber Security Policy - Contingency and Access Controls","","ACT Multi Academy Trust (MAT) cyber security policy sets a risk-management approach to protect digital systems, data, and users across all Trust schools. It establishes confidentiality, integrity, and availability through appropriate access levels, security standards, precautions, and supporting procedures. The policy covers human-error mitigation, prevention of cyberattacks, and a contingency plan to reduce impact, alert relevant authorities, and prevent recurrence. It aligns with UK GDPR, the Data Protection Act 2018, and the DfE Cyber and Information Security Manual, including clear roles, monitoring, compliance, incident reporting best practices, and policy review.",{"@graph":63,"@context":119},[64,80,102],{"@type":65,"itemListElement":66},"BreadcrumbList",[67,71,74,77],{"item":68,"name":69,"@type":70,"position":9},"https://docshare.wps.com","Home","ListItem",{"item":72,"name":10,"@type":70,"position":73},"https://docshare.wps.com/template/",2,{"item":75,"name":41,"@type":70,"position":76},"https://docshare.wps.com/template/letters/",3,{"item":78,"name":59,"@type":70,"position":79},"https://docshare.wps.com/template/cyber-security-policy-contingency-and-access-controls/244302/",4,{"url":78,"name":59,"@type":81,"image":82,"author":87,"headline":59,"publisher":90,"fileFormat":93,"inLanguage":57,"description":61,"dateModified":94,"datePublished":95,"encodingFormat":93,"isAccessibleForFree":96,"interactionStatistic":97},"DigitalDocument",{"url":83,"@type":84,"width":85,"height":86},"https://docshare.wps.com/thumbnails/cyber-security-policy-contingency-and-access-controls/244302.png","ImageObject",442,249,{"name":88,"@type":89},"Sarah ","Person",{"url":68,"name":91,"@type":92},"DocShare","Organization","application/pdf","2026-10-21","2026-09-12",true,{"@type":98,"interactionType":99,"userInteractionCount":101},"InteractionCounter",{"@type":100},"ViewAction",9,{"@type":103,"mainEntity":104},"FAQPage",[105,111,115],{"name":106,"@type":107,"acceptedAnswer":108},"What is the purpose of the Cyber Security Policy for ACT Multi Academy Trust?","Question",{"text":109,"@type":110},"It outlines how ACT MAT manages cyber security risks to protect digital systems, data, and users across all Trust schools.","Answer",{"name":112,"@type":107,"acceptedAnswer":113},"Who does the policy apply to?",{"text":114,"@type":110},"It applies to all staff, governors, trustees, contractors, volunteers, and pupils using MAT-owned or personal devices for school-related activities, and to Trust-owned or managed digital systems, networks, and data.",{"name":116,"@type":107,"acceptedAnswer":117},"What access control measures are required?",{"text":118,"@type":110},"Users are assigned unique credentials, passwords must meet NCSC complexity standards and be changed regularly, and multi-factor authentication is required for administrative systems.","https://schema.org",{"og:url":78,"og:type":121,"og:title":59,"og:site_name":91,"og:description":61},"article",{"robots":123,"canonical":78},"index,follow",{"doc_id":125,"site_id":56},244302,1790023864,{"code":4,"msg":5,"data":128},{"doc_id":125,"user_id":129,"nickname":88,"user_avatar":130,"doc_module":9,"category_id":40,"category_name":41,"doc_title":59,"doc_description":61,"doc_content":131,"file_id":132,"file_url":133,"file_type":134,"file_size":135,"view_count":101,"is_deleted":4,"is_public":9,"is_downloadable":9,"audit_status":9,"page_count":25,"language":136,"language_code":57,"site_id":56,"html_lang":57,"table_of_contents":137,"faqs":138,"seo_title":139,"seo_description":61,"update_tm":140,"read_time":47},962085320529,"https://ap-avatar.wpscdn.com/davatar_9964176cb1d06d4a9deccf72a44ae3dc","Cybersecurity Policy  \n\n| Author | Alison Anderson |\n| --- | --- |\n| Policy Title | Cyber Security Policy |\n| Approval Date | July 2025 |\n| Approved By | LGB |\n| Adopted Date | November 2025 |\n\nStatement of Intent:  \nACT Multi Academy Trust (ACT) is committed to maintaining the confidentiality, integrity, and availability of its information and ensuring that the details of the finances, operations and individuals within the Trust are only accessible to the appropriate individuals. It is, therefore, important to implement appropriate levels of access, uphold high standards of security, take suitable precautions, and have systems and procedures in place that support this.  \nThe Trust recognises that breaches in security can occur. In schools, most breaches are caused by human error, therefore all staff should know how to minimise the risk. In addition, because most information is stored online or on electronic devices that can be vulnerable to cyberattacks the Trust will make sure there are procedures in place to prevent attacks occurring. To minimise both risks, it is necessary to have a contingency plan containing a procedure to minimise the potential negative impact of any security breach, to alert the relevant authorities and to take steps to prevent a repeat occurrence.  \nTable of Contents  \n1. Purpose  \n2. Scope  \n3. Legal & Regulatory Framework  \n4. Roles & Responsibilities  \n5. Policy Areas  \n6. Incident Reporting Best Practices  \n7. Monitoring & Compliance  \n8. Policy Review  \nAppendix A: Incident Log Template  \nAppendix B: Staff Onboarding Cyber Security Checklist  \n1. Purpose  \nThis policy outlines the approach of ACT Multi Academy Trust (MAT) to managing cyber security risks. It ensures the protection of digital systems, data, and users across all schools within the Trust.  \nThe policy supports compliance with UK GDPR, the Data Protection Act 2018, and the Department for Education (DfE) Cyber and Information Security Manual.  \n2. Scope  \nThis policy applies to all staff, governors, trustees, contractors, volunteers, and pupils using MATowned or personal devices for school-related activities. It covers all digital systems, networks, and data owned or managed by the Trust.  \n3. Legal & Regulatory Framework  \nThis policy is informed by the following legal and regulatory documents:  \n-UK General Data Protection Regulation (UK GDPR)  \n-Data Protection Act 2018  \n-The Children’s Code (Age Appropriate Design Code)  \n-DfE Cyber and Information Security Manual  \n-Academies Trust Handbook (2024–2025)  \n-Computer Misuse Act 1990  \n4. Roles & Responsibilities  \nThe following roles are responsible for implementing and maintaining cyber security across the Trust:  \n Trust Board: Strategic oversight and risk governance.  \n CEO / Executive Head: Ensures policy implementation and compliance.  \n Data Protection Officer (DPO): Oversees data protection and breach response.  \n IT Manager / Network Admin: Implements technical controls, monitors systems, and responds to incidents.  \n School Leaders: Enforce policy at school level and ensure staff compliance.  \n All Staff: Follow safe practices, complete training, and report incidents.  \n Pupils & Parents: Use systems responsibly and report concerns.  \nThe ACT Trust Board will be responsible for:  \n• Ensuring the Schools/Trust has appropriate cyber-security measures in place.  \n• Ensuring the Schools/Trust has an appropriate approach to managing data breaches in place.  \n• Support relevant staff in the delivery of the Policy.  \nThe CEO/Headteacher will be responsible for:  \n• Ensuring all staff members and pupils are aware of their responsibilities in relation to this policy.  \n• Ensuring appropriate user access procedures are in place.  \n• Responding to alerts for access to inappropriate content in line with the Schools’Online Safety Policy and Procedures.  \n• Organising training for staff members in conjunction with the online safety officer.  \nThe DPO will be responsible for:  \n• The ove","cbCaipgcWWKuFwW7","https://ap.wps.com/l/cbCaipgcWWKuFwW7","pdf",1154009,"English","# Purpose\n# Scope\n# Legal & Regulatory Framework\n# Roles & Responsibilities\n# Policy Areas\n## Access Control\n## Device & Network Security\n# Incident Reporting Best Practices\n# Monitoring & Compliance\n# Policy Review\n# Appendix A: Incident Log Template\n# Appendix B: Staff Onboarding Cyber Security Checklist","[{\"question\":\"What is the purpose of the Cyber Security Policy for ACT Multi Academy Trust?\",\"answer\":\"It outlines how ACT MAT manages cyber security risks to protect digital systems, data, and users across all Trust schools.\"},{\"question\":\"Who does the policy apply to?\",\"answer\":\"It applies to all staff, governors, trustees, contractors, volunteers, and pupils using MAT-owned or personal devices for school-related activities, and to Trust-owned or managed digital systems, networks, and data.\"},{\"question\":\"What access control measures are required?\",\"answer\":\"Users are assigned unique credentials, passwords must meet NCSC complexity standards and be changed regularly, and multi-factor authentication is required for administrative systems.\"}]","Cyber Security Policy - Contingency and Access Controls | PDF",1789215487]