The checklist will give you an insight about where your organisation is with data protection from a data privacy and technical security perspective. The checklists form part of the Best Practice library which includes contextualised guidance, documents and resources on specific areas of data processing. The checklists form part of the ICO Accountability Framework which helps organisations with their governance and corporate risk management where it relates to data protection. The checklists cover all aspects of the framework, enabling you to assess against organisation baselines:
- Leadership & Oversight
- Risk Management (DPIA's)
- Policies & Procedures
- Individual Rights
- Contracts & Data Sharing
- Transparency
- Training & Awareness
- Records Management
- Monitoring Verification & Reporting (Data Breaches, SARs and FOI's)
- Response & Enforcement (SARs and FOI's)
Bring your own device
The Bring your own device checklist looks as the procedures around bringing your own device into the workplace - for schools this could be for staff or students. It looks as best practice and questions to ask about risk and security.If you are considering implement a BYOD policy we would also advise reviewing the Government's BYOD Guidance for creating an effective BYOD policy.
Consider reviewing the Information and Cyber Security Best Practice Area alongside the DfE Digital Standards for Schools and Colleges, filtering of student BYOD should be carefully considered inline with the Keeping Children Safe in Education 2023 documentation.
Answer a sample BYOD checklist question:
DPE customers can get started on completing the Bring your own device checklist here: