13. Training and awareness

The Council ensures that:

• Staff and councillors receive appropriate information security awareness;
• Roles with elevated access receive additional guidance;
• Security responsibilities are reinforced through policy and procedure.

14. Compliance and review

Failure to comply with this policy may result in disciplinary or other appropriate action.

This Information Security Policy is reviewed at least annually, or sooner where there are material changes to technology, risk, legislation or Council operations.