Report for January 2023

Report Date

January 2023

Achievements in last period

Sheila, Jono and the three campus leads met to continue discussion on InfoSec roles and reponsibilities within CMVM. 

One proposal, a 'per-campus' RACI matrix with named individuals linked to one or more of the UoE's 14 InfoSec standards, was thought to be too detailed at this stage. The cross-campus and interdisciplinary nature of a lot of CMVM research doesn't create neat 'silos' for assigning roles and responsibilities in this way.  

Issues

As things stand, we have incomplete information on the people within some research areas and groupings, making assigning the roles and responsibilities a challenging task. 

Next Steps

Sheila has identified InfoSec responsibilities of Head of College to date, there is scope to extend this type of analysis to further cross-InfoSec Standard roles for the other categories (Data Stewards, Users, etc...).

JH and SF meeting with Ken Brooker from internal audit.