Making Your Nation Secure
Having the proper controls around information management will support Council and the administration in maintaining the required levels of confidentiality and security of data.
Information management involves:
- the gathering of information from one or more sources,
- the sorting and distributing of that information to those who need it, and
- the management of that information through record keeping.
Information Technology
To make sure that access to the First Nation’s information is well managed, Council must create a policy for used by the First Nation that follow the rules and below.
- Information systems are created to help and support the First Nation’s operations and .
- Information systems are regularly reviewed to make sure they are being put to the best possible use.
- Deals and agreements are entered in the information systems and completed in a timely manner.
- Only approved software is used and this software is only available to people who have been trained and approved to use it.
- Data and information is easily retrieved and kept according to the standards and requirements of the laws or agreements applicable to the First Nation.
- When the First Nation hires contractors to provide information technology services, the definition of services in the contract must meet the needs of the First Nation.
- Access to software and data is limited by a set of security tools and techniques.
- The way the data is organized is the way that is best for the First Nation.
- Any new methods or ways of organizing the data, or any changes to the previous data structure, are tested before being used.
- All new network, communication, and systems software meet the needs of the First Nation.
- New computer hardware such as laptops and monitors meet the needs of the First Nation.
Records and Information Privacy
A sound system includes the documentation and saving of certain information (records) that allows for the First Nation to operate smoothly and also for Council to meet the accountability and transparency expectations of its members.
Council must create a policy for the records of the First Nation that includes the creation, upkeep, security, storage, access, and removal of these records. These records must follow any legal rules and standards that are in place.
This policy must include the steps for receiving and managing requests for information that the First Nation has access to, must release, and keep private.
Resources to get you Started
Sample Policy
- DOCX file: 2019-07-29_final_information_management_sample_policy_and_procedures Download