• Section 1 - Overview
• Section 2 - Scope
• Section 3 - Directive
• Section 4 - Related Documents
• Section 5 - Definitions

Section 1 - Overview

(1) This Directive sets out the minimum requirements that all personnel must follow to protect the integrity of information for which we are responsible.

(2) Maintaining the integrity of information is essential to protecting our clients, our business operations and our reputation. Every person who creates, accesses, modifies or deletes information has a responsibility to ensure that information remains complete, accurate and reliable.

Section 2 - Scope

(3) This Directive applies to all personnel who create, access, modify, transmit or delete information or information assets on behalf of the Organisation.

(4) This Directive supports the Information Security Policy.

Section 3 - Directive

(5) When creating, accessing, modifying, transmitting or deleting information, you must:

1. verify that you are working with the correct client, record, file or information before making any changes;
2. ensure that information is entered, updated or otherwise managed accurately and completely;
3. take reasonable steps to verify that changes have been applied correctly before completing the task;
4. not overwrite, replace, delete or otherwise modify information unless authorised to do so and satisfied that the action is correct;
5. preserve information that may be required for legal, contractual, operational or audit purposes;
6. immediately report any actual or suspected incorrect, incomplete, unauthorised or unintended creation, modification, deletion or disclosure of information;
7. cease processing where there is uncertainty regarding the identity of a client, the correctness of information, the record being updated or the action being performed until the matter has been resolved;
8. not use assumptions, estimates or unverified information where its accuracy is material to the task being performed;
9. protect information from accidental loss, corruption or unauthorised modification throughout its lifecycle; and
10. comply with applicable policies, procedures and other directives relating to the management and protection of information.
11. not proceed with any action where you have reason to believe the information, record or intended action is incorrect until the matter has been resolved.

(6) Failure to comply with this Directive may compromise the integrity of information, adversely affect our clients or business operations, and may result in disciplinary action or other appropriate corrective measures.

Section 4 - Related Documents

(7) Refer to the Information Security Policy.

Section 5 - Definitions

(8) Definitions applicable to this Directive are contained in the Corporate Glossary.