Minimum Standards and Legislation for IT - HELP

[Ali]

Can you help??

With just the first part of the question, most of our IT is now outsourced and whats left is about as much use as tits on a bull...

I'll give you an example of what i'm after from another department...

It's a fundamental list, i appreciate not all will apply, bit of "Fudging" required here.

Thanks in advance.

AR

Health & Safety Legislation
■ Health and Safety at Work Etc. Act 1974
■ Chemicals (Hazard Information and Packaging for Supply) Regulations 2004
■ Confined Spaces Regulations 1997
■ Control of Asbestos at Work Regulations 2006
■ Control of Substances Hazardous to Health Regulations 2002
■ Electrical Equipment (Safety) Regulations 1994
■ Electricity at Work Regulations 1989
■ Regulatory Reform (Fire Safety) Order 2005 – England & Wales
■ Fire (Scotland) Act 2005
■ Fire Safety (Scotland) Regulations 2006 - Scotland
■ Gas Safety (Installation and Use) Regulations 1998
■ Health and Safety (Consultation with Employees) Regulations 1996
■ Health and Safety (Display Screen Equipment) Regulations 1992
■ Health and Safety (Miscellaneous Amendment) Regulations 2002
■ Health and Safety (Enforcing Authority) Regulations 1998
■ Health and Safety (First-Aid) Regulations 1981
■ Health and Safety (Safety Signs and Signals) Regulations 1996
■ Health and Safety Information for Employees Regulations 1989
■ Lifting Operations and Lifting Equipment Regulations 1998
■ Management of Health and Safety at Work Regulations 1999
■ Manual Handling Operations Regulations 1992

4.31 Codes and Standards
The Tenderer shall identify the proposed National, International Codes, Standards and Legislation to which the Tenderer will perform the Services.
The Tenderer shall define its system for updating revisions to such standards.
The Tenderer shall advise what, if any measures it has implemented to supplement or exceed such standards.
The Tenderer shall provide details of its Equipment Verification Scheme, which shall be independently assessed to demonstrate to Company that Tenderer’s equipment shall be suitable for offshore applications.

 

[Ali]

M'on!!! More IT geeks in here than in the whole of PC world!

 

[ChrisR]

So what do you want exactly, effectively a support agreement you can shove to the outsourcers?

Not really many base line standards/regs for IT like there are with H+S stuff.

Data protection act I guess would be one, but most will be internal/company policies and procedures.

http://www.businesslink.gov.uk/bdotg/action/detail?itemId=1076152722&type=RESOURCES

 

[Ali]

Just assumed there would be more std's and legislation...Thanks for the link!

 

[ChrisR]

Nah, unregulated cowboy industry

 

[Ali]

So it seems mate! Our IT support it outsourced to BOMGAR who for the most part are pretty good. Our internal I.T is b****cks, not 100% sure what they do, I ask them this question, they pinged it to Legal and legal pinged it back to I.T! Handy!

 

[ChrisR]

Have used BOMGAR's remote stuff before but never used them for actual support.

See even if most of your IT is outsourced your internal IT should still have all the boggo standard policy/guideline docs. Hell you can probably even just grab a template off the web if you want a really simple/s**tty one.

They sound like monkeys

You do have things like ISO27001 which is an information security standard that you can be accredited for, but even then it's nothing mandatory, you choose to do it.

 

[ChrisR]

More on the BSI/ISO stuff

http://shop.bsigroup.com/en/Browse-By-Subject/ICT/Information-security-standards-and-publications/

 

[Ali]

Thanks Chris.