A copy of the Assertion 10 I.T. Policy 2026 can be downloaded here
A copy of the Assertion 10 Digital & Data Compliance Statement 2026 can be downloaded here
Assertion 10 I.T. Policy 2026
1. Introduction
Maker with Rame Parish Council recognises the importance of effective secure information technology (IT) and email usage in supporting its business, operations and communications. This policy outlines the guidelines and responsibilities for the appropriate use of IT resources and email by council members, employees, volunteers and contractors.
2. Scope
This policy applies to all individuals who use Maker with Rame Parish Council’s IT resources, including computers, networks, software, devices, data and email accounts.
3. Acceptable use of IT resources and email
Maker with Rame Parish Council IT resources and email accounts are to be used for official council-related activities and tasks. Limited personal use is permitted, provided it does not interfere with work responsibilities or violate any part of this policy. All users must adhere to ethical standards, respect copyright and intellectual property rights, and avoid accessing inappropriate of offensive content.
4. Device and software usage
Where possible, authorised devices, software and applications will be provided by Maker with Rame Parish Council for work-related tasks. Unauthorised installation of software on authorised devices, including personal software, is strictly prohibited due to security concerns.
5. Data Management and Security
All sensitive and confidential Maker with Rame Parish Council data should be stored and transmitted securely using approved methods. Regular data backups should be performed to prevent data loss, and secure data destruction methods should be used when necessary.
6. Network and Internet usage
Maker with Rame Parish Council’s network and internet connections should be used responsibly and efficiently for official purposes. Downloading and sharing copyrighted material without proper authorisation is prohibited.
7. Email communication
Email accounts provided by Maker with Rame Parish Council are for official communication only. Emails should be professional and respectful in tone. Confidential or sensitive information must not be sent via email unless it is encrypted.
Be cautious with attachments and links to avoid phishing and malware. Verify the source before opening any attachments or clicking on links.
8. Password and account security
Maker with Rame Parish Council users are responsible for maintaining the security of their accounts and passwords. Passwords should be strong and not shared with others. Regular password changes are encouraged to enhance security.
9. Mobile devices and remote work
Mobile devices provided by Maker with Rame Parish Council should be secured with passcodes and/or biometric authentication. When working remotely, users should follow the same security practices as if they were in the office.
10. Email monitoring
Maker with Rame Parish Council reserves the right to monitor email communications to ensure compliance with this policy and relevant laws. Monitoring will be conducted in accordance with the Data Protection Act and GDPR.
11. Retention and archiving
Emails should be retained and archived in accordance with legal and regulatory requirements. Regularly review and delete unnecessary emails to maintain an organised inbox.
12. Reporting security incidents
All suspected security breaches or incidents should be reported immediately to the designated IT point of contact for investigation and resolution. Report any email-related security incidents or breaches to the Clerk immediately.
13. Training and awareness
Maker with Rame Parish Council will provide regular training and resources to educate users about IT security best practices, privacy concerns, and technology updates. All employees and councillors will receive regular training on email security and best practices.
14. Compliance and consequences
Breach of this IT and Email Policy may result in suspension of IT privileges and further consequences as deemed appropriate.
15. Policy review
This policy will be reviewed annually to ensure its relevance and effectiveness. Updates may be made to address emerging technology trends and security measures.
16. Contacts
For IT related enquiries or assistance, users can contact clerk@makerwithrame-pc.gov.uk All staff and councillors are responsible for safety and security of Maker with Rame Parish Council’s IT and email systems. By adhering to this IT and Email Policy, Maker with Rame Parish Council aims to create a secure and efficient environment that supports its mission
and goals.
Assertion 10 Digital & Data Compliance Statement 2026
Maker with Rame note that the 2025 Practitioner’s Guide introduces a new governance requirement – Assertion 10. From 2025-26 onwards, councils must confirm that they have taken proper steps to ensure digital and data compliance including:
Using a council-owned domain (e.g. clerk@makerwithrame-pc.gov.uk) rather than personal Gmail/Outlook accounts. Noting that org.uk is also acceptable, Maker with Rame Parish Council has chosen to remain with the following (e.g. clerk@makerwithrame-pc.gov.uk )
The Parish Council is already compliant.
Ensuring websites are compliant with Accessibility Regulations 2018 (WCAG 2.2AA).
The Parish Council is already compliant.
Publishing required documents under the Freedom of Information Act 2000 and transparency Code The Parish Council is already compliant.
Adopting an IT policy covering both council-owned and personal devices. A new policy is developed for adoption 23rd March 2026.
The Parish Council is already compliant.
Complying with GDPR (2016) and Data Protection Act 2018 for all personal data.
The Parish Council:
Already process data in line with the seven principles of data protection.
Are registered with the Information Commissioners Office.
Have a Clerk nominated as the Data Processor and Data Controller.
Have a Data Risk Assessment.
The Parish Council is already compliant.