Useful Information – ISDM Policy Implementation

Data Asset Inventory	Template of Blank Data/Information Asset Inventory *
Data Asset Inventory	Examples of Completed Data/Information Asset Inventory *
Presentation Slides	ISDM Basics [ISDM-BAS] *
	Data Classification and Data Asset Inventory [ISDM-TS-DCDA] *
	Setup and Usage in Departmental Data Asset Storage (DDAS) [ISDM-BS-DDAS] *
	Technical Session on Administration of Departmental Data Asset Storage (DDAS) [ISDM-TS-DDAS] *
	Workshop on the Use of Information Rights Management (IRM@hku) [ISDM-IRM-AIP] *
	Information Security (I) – Commonly Overlooked Issues [ISDM-IS-ISU1] *
	Physical/IT Environment, Contingency and User Management [ISDM-PITCUM] *
	Data/Information Life Cycle Management [ISDM-DLCM] *
DDAS Manuals	User Guide on Central SharePoint Service for General Users (link to HKU ITS website) User Guide on Central SharePoint Service for site administrator (link to HKU ITS website) Use of Information Rights Management (IRM) for email and file protection (link to HKU ITS website) User Guide on Mapping DDAS as a network drive User Guide on Using “email group for staff” to assign IRM rights User Guide on Assigning Unique Permissions in DDAS User Guide on Using Information Rights Management (IRM) with DDAS
GDPR	GDPR Implications and Considerations *
ISDM Self-assessment	Self-assessment Sample Questions in MS Excel Format * Presentation slides of ISDM self-assessment review and preparation *
Data Management	Use DMPTool for Data Management Plan Use DMPTool for Facility Security Planning Use DMPTool for Information Risk Assessment
Physical Environment	Facility Security Planning Checklist *
IT Environment	Information Risk Assessment * Privacy Risk Assessment (Privacy Impact Assessment) *

* HKU Portal login required

Message of EVP on Implementation of University-wide ISDM

Dear Colleagues,

A study completed last year by PricewaterhouseCoopers concluded that the University’s level of maturity in data management is low, and went on to make a number of recommendations to improve the situation. These recommendations are as follows:

To proceed on establishing the Information Technology Policy Committee (“ITPC”) under Council as the Strategy Governance on Information Policy which covers Information Security and Data Management.
To reposition the Central Compliance Team for Personal Data Protection as Information Security and Data Management Sub-committee of the ITPC to serve the wider functions as the Operational Governance on Information Security and Data Management.
To continue the work of the Task Force on Management of Research Data and Records related to research data management.
To continue the current role and functions the University Data Protection Officer as the policy oversight on protection of personal data and the related advisory.
To re-organise the Information Security Team of IT Services to function as the Data & Security Team in providing the oversight for data and information security compliance (including personal data).
To implement the University-wide Information Security and Data Management Policy with 3 lines of defence through three phases of development.

These recommendations have the support of the Task Force on University Data Policy, the Senior Management Team, Information Technology Committee and the Senate. Cyber-security is a major risk affecting the University and the introduction of this policy is crucial to the University’s future success.

A series of briefing sessions will be held in June for the departmental Information Security and Data Management (“ISDM”) coordinators to be nominated by departments/offices/work units. After that, training sessions on the principles and practices of data classifications and data inventory management, in the context of the University’s ISDM Policy, will be organised from July to October for the data owners/stewards, custodians of departments/offices/work units. ITS will coordinate the initiative and announce details of the arrangement in due course as the progress moves forward. Please visit the website: https://isdm.hku.hk for more information.

This is an extremely important initiative and I am grateful for your support.

Thank you very much.

Yours sincerely,

Dr. Steven J. Cannon
Executive Vice-President
(Administration and Finance)

May 24, 2017

Previous Training Calendar

	Month	Aug 2022	Sep 2022	Oct 2022	Jun 2023	Jul 2023
Category	Curriculum
Data Management	ISDM Basics		9/21
	Data Classification & Data Asset Inventory
	Data/Information Life Cycle Management	8/27
	Physical/IT Environment, Contingency and User Management
Information Security	Information Security (I) – Misconceptions and Commonly Overlooked Issues
Information Security	Information Security (II) – Information Security under New Normal
Information Rights Management (IRM)	AIP Workshop
Departmental Data Asset Storage (DDAS)	Technical Session of Administration on DDAS
Departmental Data Asset Storage (DDAS)	DDAS Workshop
ISDM Self-assessment	Preparation and review			10/12, 10/18	6/28	7/7, 7/10