Copilot teams - mobile issues

Assessment brief 247E&G with its headquarter in London, is a private family-owned energy supplier established by local businessman in Swindon, UK with the mission to offer safe, efficient, technology driven and customer focused services to its customers. Currently the company is operating in the UK only and offers Electricity generation services to its major domestic cities. The business operations require regular connectivity with regional and national transmission networks as well as other stakeholders. With the increase of recent energy cost and overwhelming customer queries, the company needs to overhaul their current operations and wishes to implement web-based customer portals which can offer customers a single point of access and act as a self-service option, which can simplify operations and improve customer experience. With this new automated system, the company also aims to introduce its customers to submit meter readings online, choose the suitable energy package as per their energy usage and online payments. However, these improvements to business operations means more responsibility towards regulatory, legal, and contractual obligations for the business, to safeguard the privacy of their customers data. The company rely on national infrastructure to ensure continuous energy supplies to its domestic and commercial customers and is aware of National Cyber Security Centre (NCSC) guidelines on rising cyber security threats against the critical infrastructure. In which the attacker can take control of the energy supply and can either halt it or can create backdoor to steal customers’ log in details and payment cards information. To address the challenges posed by the changing cyber security landscape, 247E&G management acknowledges the significance of information security to its assets, and the responsibility to ensure protection of personal data of its stakeholders and to maintain confidentiality, integrity, and availability against cyber security attacks. The company wants to adopt robust Information Security policy to adhere with legal and regulatory compliances and understand that Information Governance can play a vital role in its day-to-day operations as it establishes policies, procedures, and accountability, which is imperative for an effective management lifecycle for its customers and other stakeholders’ personal data and can maximise data privacy and confidentiality. The aim of Information Governance is not only to provide data confidentiality and protection assurance to 247E&G management but to also help individual staff members to understand the importance of data handling procedures. This will assist them to adhere to information assurance, corporate information assurance, information security assurance procedures and perform their duties ethically to demonstrate duty of care as well as respecting data subject rights while processing their personal data and also to avoid any escalation privileges to national infrastructure. Your task is to develop an information governance policy for 247E&G and write an accompanying report, which provides justification of policy contents, chosen framework, risk assessment methodologies and strategy to implement strong information governance for the given organisation. The information security policies should include Introduction, purpose, scope. Identification and allocation of roles and responsibilities, accountable for ensuring legal, regulatory, and contractual obligations in the context of given scenario. Information Governance Policy Framework with recommendations of minimum 8 controls to establish Information Security Management System for given context. Implementation plan and monitoring mechanisms to address security threats and mitigate security vulnerabilities in the context of given scenario Presentation should include appropriate language, referencing, clarity of expression style, format and length.