Procedure
Security Disciplinary Process Procedure
This procedure defines the process for investigating and responding to security policy violations, including graduated disciplinary actions proportionate to severity. It ensures that security breaches, misuse of assets, and non-compliance events are handled consistently, fairly, and in accordance with employment law and regulatory obligations.
- Type
- Procedure
- Version
- 1.0.6
- Date
- 2026-09-24
- Owner
- Chief Information Security Officer
- Approving authority
- Chief Information Officer
- Classification
- Public
- Confidentiality
- Public
- Category
- Information Security
- Review frequency
- Annual and upon material HR, legal, or regulatory change
- Licence
- CC BY-SA 4.0
Read the full text on GitHub (opens in a new tab)
Outline
- Purpose
- Scope
- Roles and responsibilities
- 1. Violation categories
- 2. Incident detection and referral
- 3. Investigation
- 4. Disciplinary hearing
- 5. Disciplinary outcomes
- 6. Appeal
- 7. Post-action security controls
- Framework alignment
Frameworks it maps to
Related documents
- Enterprise Governance and Risk Management Policyrisk
- Personnel Security Screening Standardsecurity
- IT Onboarding and Offboarding Proceduresecurity
- Legal and Regulatory Compliance Policycompliance
Next
All Documents