IT policies and procedures

Provide an electronic copy of policy, procedures or guidance issued to your IT department/staff or others concerning the :

1. Management of IT assets (PC’s, Desktop, Laptops, Tablets, SmartPhone) 

Devon County Council does not have a formal policy document on the management of IT assets.  However, IT assets are tracked appropriately in the council’s IT Service Management (ITSM) tool during the device lifecycle.

2. IT Asset disposal process 

The IT asset disposal process is documented within the Council’s Information, Equipment and Media Policy which can be found on this Devon County Council webpage

3. Process or Procedure for monitoring and tracking of physical IT asset inventory/stock

Devon County Council does not have a formal policy document on the monitoring and tracking of physical IT asset inventory / stock.  However, IT assets are tracked appropriately in the council’s IT Service Management (ITSM) tool during the device lifecycle.

4. Process for assigning asset numbers (equipment tracking numbers) to IT assets 

Devon County Council does not have a formal process for assigning asset numbers to IT assets.

5.Storage of IT assets
a. Storage area

Devon County Council holds this information. However, we consider this is exempt from disclosure under Section 31(1)(a) of the Freedom of Information Act 2000. This is because we consider that releasing this detail would reveal information that could be used by threat actors, to jeopardise the security of the Council’s IT assets.

Whilst the council recognises that there is a public interest in openness and transparency regarding the management of our IT assets, we are mindful that local authorities are increasingly being targeted by “bad actors” who wish to compromise the security of local IT assets.  Any compromise to the security of IT assets will have a significant impact on the council in terms of the utilisation of resource and in terms of cost.  We therefore do not consider that it is in the public interest to release information that may increase the security risk to our IT assets.  

b. Inspection of equipment 

Devon County Council does not have a formal process document.  However, stock takes are taken at appropriate times.

c. Procedure for the intake and recording of new equipment 

Devon County Council does not have a formal process document.  However stock takes are taken at appropriate times

6. Policy on the use of personal computers by Council staff 

Personal use of the Council’s IT infrastructure is referenced within the Personal Information Security Policy which can be found on this Devon County Council webpage

7. Procedures for requests for new IT assets 

The procedure can be found on this Devon County Council webpage (partly public)

8. Procedures for the installation and disposal of IT equipment. 

The procedure can be found on this Devon County Council webpage (partly public)

9. Procedures for the redistribution/reallocation of IT Equipment to new staff

The procedure is can be found on this Devon County Council webpage (partly public)

10. Procedures for returning equipment from staff who have left the Council

The procedure is available from this Devon County Council webpage