Information classification policy

1. Purpose and scope

1.1 This policy sets out RoS commitment to protect our information by adopting the UK Government Security Classifications Policy (GSCP).

1.2 This policy applies to all RoS information, whatever their format or sensitivity, and wherever they are created, stored or used.

2. Guiding principles

2.1 All RoS information falls within the OFFICIAL classification. RoS does not create, store or use information of SECRET or TOP SECRET classifications.

3. The policy

3.1 RoS adopts the GSCP in full, except for the requirement to protectively mark all documents and files. The RoS Information Handling Guidance sets out scenarios where protectively marking information should be considered.

3.2 The RoS Information Handling Guidance should be used to guide appropriate protection of information.

4. Roles and responsibilities

4.1 Information Security Assurance Group (ISAG) is responsible for the content of this policy, its approval and review. They are responsible for ensuring its implementation in practice and for monitoring this over time. They are responsible for ensuring that appropriate procedures, guidelines or standards as are required to support this are maintained and ownership for these assigned appropriately.

4.2 All RoS employees and contingent workers are bound by the commitments of this policy, therefore also of the GSCP.

5. Approval and review

5.1 This policy will be reviewed and approved by ISAG at two-year intervals, unless earlier review is appropriate.