{
    "document_id": 12487,
    "page": 3,
    "width_pt": 595.32,
    "height_pt": 841.92,
    "rotation": 0,
    "pipeline_version": "paddleocr-vl-1.6+paul-48",
    "engine": "paddleocr_vl",
    "source_run_id": 12598,
    "item_count": 38,
    "counts_by_type": {
        "footer": 1,
        "header": 2,
        "heading": 5,
        "list": 6,
        "list_item": 18,
        "text": 6
    },
    "build_ms": 3,
    "items": [
        {
            "id": "p3.1",
            "order": 1,
            "type": "header",
            "bbox": {
                "l": 70.3058,
                "t": 805.44,
                "r": 195.3206,
                "b": 792.24
            },
            "text": "Newquay Town Council",
            "attrs": {
                "block_label": "header"
            },
            "level": 2
        },
        {
            "id": "p3.2",
            "order": 2,
            "type": "header",
            "bbox": {
                "l": 338.3318,
                "t": 804.96,
                "r": 524.7742,
                "b": 792.72
            },
            "text": "Data Governance – Core Document",
            "attrs": {
                "block_label": "header"
            },
            "level": 2
        },
        {
            "id": "p3.3",
            "order": 3,
            "type": "list",
            "bbox": {
                "l": 86.6225,
                "t": 769.8552,
                "r": 446.0701,
                "b": 723.84
            },
            "text": "",
            "attrs": {
                "item_count": 3
            },
            "children": [
                {
                    "id": "p3.3.1",
                    "order": 4,
                    "type": "list_item",
                    "bbox": {
                        "l": 86.8625,
                        "t": 769.8552,
                        "r": 354.6485,
                        "b": 755.28
                    },
                    "text": "Supporting DPIAs and breach management;",
                    "marker": "•"
                },
                {
                    "id": "p3.3.2",
                    "order": 5,
                    "type": "list_item",
                    "bbox": {
                        "l": 86.8625,
                        "t": 754.25568,
                        "r": 355.3684,
                        "b": 739.2
                    },
                    "text": "Maintaining related policies and procedures;",
                    "marker": "•"
                },
                {
                    "id": "p3.3.3",
                    "order": 6,
                    "type": "list_item",
                    "bbox": {
                        "l": 86.6225,
                        "t": 738.89904,
                        "r": 446.0701,
                        "b": 723.84
                    },
                    "text": "Coordinating progress towards Cyber Essentials certification.",
                    "marker": "•"
                }
            ]
        },
        {
            "id": "p3.4",
            "order": 7,
            "type": "heading",
            "bbox": {
                "l": 69.8259,
                "t": 714.96,
                "r": 283.1429,
                "b": 699.36
            },
            "text": "5.4 Directors, Managers and users",
            "attrs": {
                "block_label": "paragraph_title"
            },
            "level": 3
        },
        {
            "id": "p3.5",
            "order": 8,
            "type": "text",
            "bbox": {
                "l": 69.346,
                "t": 694.08,
                "r": 394.4805,
                "b": 679.2
            },
            "text": "All staff, councillors and system users are responsible for:"
        },
        {
            "id": "p3.6",
            "order": 9,
            "type": "list",
            "bbox": {
                "l": 85.6627,
                "t": 670.8,
                "r": 482.7827,
                "b": 624.24
            },
            "text": "",
            "attrs": {
                "item_count": 3
            },
            "children": [
                {
                    "id": "p3.6.1",
                    "order": 10,
                    "type": "list_item",
                    "bbox": {
                        "l": 85.6627,
                        "t": 670.8,
                        "r": 391.841,
                        "b": 656.16
                    },
                    "text": "Complying with this policy and related procedures;",
                    "marker": "•"
                },
                {
                    "id": "p3.6.2",
                    "order": 11,
                    "type": "list_item",
                    "bbox": {
                        "l": 86.6225,
                        "t": 655.2604799999999,
                        "r": 306.8981,
                        "b": 640.8
                    },
                    "text": "Protecting information they handle;",
                    "marker": "•"
                },
                {
                    "id": "p3.6.3",
                    "order": 12,
                    "type": "list_item",
                    "bbox": {
                        "l": 87.1024,
                        "t": 639.7823999999999,
                        "r": 482.7827,
                        "b": 624.24
                    },
                    "text": "Reporting suspected security incidents or weaknesses immediately.",
                    "marker": "•"
                }
            ]
        },
        {
            "id": "p3.7",
            "order": 13,
            "type": "heading",
            "bbox": {
                "l": 69.586,
                "t": 589.92,
                "r": 317.456,
                "b": 573.12
            },
            "text": "6. Risk-based approach to security",
            "attrs": {
                "block_label": "paragraph_title"
            },
            "level": 3
        },
        {
            "id": "p3.8",
            "order": 14,
            "type": "text",
            "bbox": {
                "l": 69.586,
                "t": 567.36,
                "r": 436.9519,
                "b": 552
            },
            "text": "The Council adopts a risk-based approach to information security."
        },
        {
            "id": "p3.9",
            "order": 15,
            "type": "text",
            "bbox": {
                "l": 69.8259,
                "t": 543.6,
                "r": 263.4669,
                "b": 528.48
            },
            "text": "Security controls are informed by:"
        },
        {
            "id": "p3.10",
            "order": 16,
            "type": "list",
            "bbox": {
                "l": 85.9027,
                "t": 519.90048,
                "r": 461.6669,
                "b": 458.16
            },
            "text": "",
            "attrs": {
                "item_count": 4
            },
            "children": [
                {
                    "id": "p3.10.1",
                    "order": 17,
                    "type": "list_item",
                    "bbox": {
                        "l": 85.9027,
                        "t": 519.90048,
                        "r": 362.087,
                        "b": 505.68
                    },
                    "text": "The nature and sensitivity of the information;",
                    "marker": "•"
                },
                {
                    "id": "p3.10.2",
                    "order": 18,
                    "type": "list_item",
                    "bbox": {
                        "l": 86.6225,
                        "t": 504.4224,
                        "r": 461.6669,
                        "b": 489.84
                    },
                    "text": "The potential impact of loss, unauthorised access or disruption;",
                    "marker": "•"
                },
                {
                    "id": "p3.10.3",
                    "order": 19,
                    "type": "list_item",
                    "bbox": {
                        "l": 86.8625,
                        "t": 488.82287999999994,
                        "r": 353.9287,
                        "b": 474.48
                    },
                    "text": "The likelihood of threats and vulnerabilities;",
                    "marker": "•"
                },
                {
                    "id": "p3.10.4",
                    "order": 20,
                    "type": "list_item",
                    "bbox": {
                        "l": 87.1024,
                        "t": 473.46623999999997,
                        "r": 343.8507,
                        "b": 458.16
                    },
                    "text": "Findings from DPIAs and incident reviews.",
                    "marker": "•"
                }
            ]
        },
        {
            "id": "p3.11",
            "order": 21,
            "type": "heading",
            "bbox": {
                "l": 70.0659,
                "t": 423.12,
                "r": 329.4536,
                "b": 406.8
            },
            "text": "7. Access control and authentication",
            "attrs": {
                "block_label": "paragraph_title"
            },
            "level": 3
        },
        {
            "id": "p3.12",
            "order": 22,
            "type": "text",
            "bbox": {
                "l": 69.346,
                "t": 401.04,
                "r": 327.7739,
                "b": 386.16
            },
            "text": "Access to Council information and systems is:"
        },
        {
            "id": "p3.13",
            "order": 23,
            "type": "list",
            "bbox": {
                "l": 86.1426,
                "t": 377.33711999999997,
                "r": 307.378,
                "b": 331.92
            },
            "text": "",
            "attrs": {
                "item_count": 3
            },
            "children": [
                {
                    "id": "p3.13.1",
                    "order": 24,
                    "type": "list_item",
                    "bbox": {
                        "l": 86.1426,
                        "t": 377.33711999999997,
                        "r": 307.378,
                        "b": 362.64
                    },
                    "text": "Restricted to authorised users only;",
                    "marker": "•"
                },
                {
                    "id": "p3.13.2",
                    "order": 25,
                    "type": "list_item",
                    "bbox": {
                        "l": 87.1024,
                        "t": 361.85903999999994,
                        "r": 296.5802,
                        "b": 347.04
                    },
                    "text": "Based on role and business need;",
                    "marker": "•"
                },
                {
                    "id": "p3.13.3",
                    "order": 26,
                    "type": "list_item",
                    "bbox": {
                        "l": 87.5823,
                        "t": 346.38095999999996,
                        "r": 232.5131,
                        "b": 331.92
                    },
                    "text": "Reviewed periodically.",
                    "marker": "•"
                }
            ]
        },
        {
            "id": "p3.14",
            "order": 27,
            "type": "heading",
            "bbox": {
                "l": 70.3058,
                "t": 322.32,
                "r": 140.3717,
                "b": 308.4
            },
            "text": "Users must:",
            "level": 3
        },
        {
            "id": "p3.15",
            "order": 28,
            "type": "list",
            "bbox": {
                "l": 87.1024,
                "t": 299.22911999999997,
                "r": 345.0504,
                "b": 252.96
            },
            "text": "",
            "attrs": {
                "item_count": 3
            },
            "children": [
                {
                    "id": "p3.15.1",
                    "order": 29,
                    "type": "list_item",
                    "bbox": {
                        "l": 87.1024,
                        "t": 299.22911999999997,
                        "r": 240.4315,
                        "b": 284.88
                    },
                    "text": "Use unique credentials;",
                    "marker": "-"
                },
                {
                    "id": "p3.15.2",
                    "order": 30,
                    "type": "list_item",
                    "bbox": {
                        "l": 87.3424,
                        "t": 283.75104,
                        "r": 276.6642,
                        "b": 269.28
                    },
                    "text": "Protect authentication details;",
                    "marker": "•"
                },
                {
                    "id": "p3.15.3",
                    "order": 31,
                    "type": "list_item",
                    "bbox": {
                        "l": 87.1024,
                        "t": 268.27296,
                        "r": 345.0504,
                        "b": 252.96
                    },
                    "text": "Log out or lock systems when unattended.",
                    "marker": "•"
                }
            ]
        },
        {
            "id": "p3.16",
            "order": 32,
            "type": "text",
            "bbox": {
                "l": 69.1061,
                "t": 244.08,
                "r": 514.9362,
                "b": 200.4
            },
            "text": "Personal email accounts must not be used for Council business. All Council business must be conducted using approved Council systems and email accounts."
        },
        {
            "id": "p3.17",
            "order": 33,
            "type": "heading",
            "bbox": {
                "l": 69.586,
                "t": 163.68,
                "r": 286.5022,
                "b": 146.88
            },
            "text": "8. Device and system security",
            "attrs": {
                "block_label": "paragraph_title"
            },
            "level": 3
        },
        {
            "id": "p3.18",
            "order": 34,
            "type": "text",
            "bbox": {
                "l": 69.346,
                "t": 140.64,
                "r": 504.6183,
                "b": 110.4
            },
            "text": "The Council implements appropriate technical and organisational measures to protect devices and systems, including:"
        },
        {
            "id": "p3.19",
            "order": 35,
            "type": "list",
            "bbox": {
                "l": 86.1426,
                "t": 102.06047999999998,
                "r": 386.802,
                "b": 71.52
            },
            "text": "",
            "attrs": {
                "item_count": 2
            },
            "children": [
                {
                    "id": "p3.19.1",
                    "order": 36,
                    "type": "list_item",
                    "bbox": {
                        "l": 86.1426,
                        "t": 102.06047999999998,
                        "r": 386.802,
                        "b": 87.6
                    },
                    "text": "Secure configuration of Council-managed devices;"
                },
                {
                    "id": "p3.19.2",
                    "order": 37,
                    "type": "list_item",
                    "bbox": {
                        "l": 86.6225,
                        "t": 86.33952,
                        "r": 293.7008,
                        "b": 71.52
                    },
                    "text": "Patch management and updates;"
                }
            ]
        },
        {
            "id": "p3.20",
            "order": 38,
            "type": "footer",
            "bbox": {
                "l": 515.896,
                "t": 62.64,
                "r": 524.5343,
                "b": 51.84
            },
            "text": "3",
            "attrs": {
                "block_label": "number"
            }
        }
    ],
    "excluded_furniture": {
        "first": [],
        "last": []
    }
}