Data Protection

Data Security

VST has a number of Clients for which the security of data is a priority. With the high level of sensitivity that comes with handling private documentation VST has implemented a range of data security measures to ensure that information is handled in a secure and professional manner.

VST complies with all the current Data Protection legislation relating to our work.

1. Colleagues

Each of our Clients is appointed a dedicated point of contact as well as a dedicated e:mail address through which information can be sent. This ensures that any communications with our Clients are handled by the right person and any communications that we receive are not open to those members of the team that do not work for that particular Client.

All colleagues follow a variety of procedures for the various items of work; these protocols are individually agreed with clients.

All production and printing areas are constantly monitored by CCTV.

VST has a number of employment policies in place to ensure the confidentiality and security of our work in addition to our policy of being a fair and reasonable employer.

All employees are required to submit a full and current C.V., along with two references which must include their last employer. These references are then checked in full in writing and if applicable verbally.

In addition relevant production employees undertake CRB and Bank of England checks.

2. Physical Security

The building has security fob access to the building and main areas with a manned reception and visitor badge control. The areas in which sensitive data are processed have restricted access open only to those that work in that section.

The secure production area has separate key fob access; with codes generated by computer and terminated from the system should an individual leave the employment of VST. All other visitors to VST are required to sign into the access log. Visitors are escorted at all times.

The premises are patrolled 24 hours a day by on-site security guards.

3. Secure Waste

All waste paper generated within the secure area, whether it contains data or not is disposed of into a secure waste console. The waste is securely shredded and a shredding certificate is issued and logged.

4. Server Network

All work produced by our scanners or PCs are held on a secure server located in a locked room with controlled access by keypad. The distribution of the LAN is controlled by a vLAN switch with port access restricted to the secure area. The switch is located in the secure server room.

All Colleagues have password login access to the file server, with secure area staff having access to the restricted secure file storage on the server. Passwords are changed within 30 days, after staff movements passwords are again changed and log-on accounts for staff no longer authorised are immediately disabled.

External mail and data are filtered through a separate firewall and live update virus scanner.

All PCs have USB drives and CD burner capabilities disabled.

All movement of keys for data safes, doors etc are controlled and logged by authorised supervisory staff.

Data is backed up daily on a rotating data cartridge, which is securely held off the premises; there is a further weekly and monthly back-up tape, which is also held securely off-site. In addition a ready to be installed back up server is held off-site in a secure location.

5. Business Continuity

VST has a fully developed Business Continuity plan with a readily available alternative location that ensures that despite the unforeseen circumstances VST will be fully operational within 3 working days.

6. IT System Management

VST has a dedicated in-house IT development team in association with local Universities and supported by agencies. This provides VST with a strong IT infrastructure and development capability.

VST will provide a dedicated IT Manager to oversee the automisation project and provide active software development work to ensure that VST will implement a tailored solution in the shortest time possible. Once implemented the project management will continue to ensure that systems are maintained and developed further as appropriate.