4.1 Legislation

4.1.1 Understand the key points and implications to employers of the relevant

health and safety legislation:

• Health and Safety at Work Act:

o key points:

– provide a safe working environment

– ensure staff are properly trained

– adequate welfare provision

– provide relevant information, instruction and supervision

• manual handling operations:

o key points:

– avoid hazardous manual handling operations as far as possible

– assess any hazardous manual handling operations

– provide information on load and centre of gravity

– reduce the risk of injury so far as is reasonably practicable

• work at height regulations:

o key points:

– make sure the work is properly planned, supervised and carried

out by competent people

– do as much work as possible from the ground

– ensure workers can get safely to and from where they work

at height

– ensure equipment is suitable, stable and strong enough for

the job

– provide protection from falling objects

– consider emergency evacuation rescue procedures

• display screen equipment:

o implications to employers:

– conduct a display screen equipment workstation assessment

– reduce risks including making sure workers take breaks from

display screen equipment work

– provide an eye test if an employee asks for one

– provide training and information for employees.

4.1.2 Understand the health and safety risks and preventative measures of

working with digital systems:

• possible risks:

o using display screen equipment

o working at heights

o cable installation (ground level, onto walls)

o manual handling

o health and safety requirements

• methods of mitigating risk:

o adequate training

o safe working environment

o suitable provision of relevant safety equipment

o safe working practices

o suitable provision of relevant information, instruction

and supervision.

4.1.3 Understand Data Security and Protection legislation, including their effect

on organisations and individuals:

• Data Protection Act/General Data Protection Regulations:

o purpose of legislation

o eight principles.

4.1.4 Understand Computer Misuse legislation:

• the principles of the Computer Misuse Act (CMA) 1990

• consequences for company and employee

• employee awareness

• types of crimes covered by legislation.

4.1.5 Understand Equality legislation:

• the nine protected characteristics

• types of discrimination:

o direct

o indirect

o harassment

o victimisation

• where individuals are protected

• when to take action against discrimination

o time limits for claims.

4.1.6 Understand Intellectual Property legislation:

• unregistered designs

• registered designs

• patents.

4.1.7 Understand Electrical Waste legislation:

• Waste Electrical and Electronic Equipment Regulations

• safe disposal

• environmentally responsible disposal.

4.1.8 Understand the interrelationships between digital support and security

and digital legislation, and make judgements about the impact on

organisations, society and individuals.

4.1.9 Know that international law applies to some offences:

• international law in cyberspace

• international law and surveillance.

4.2 Guidelines

4.2.1 Know the sources of codes of conduct:

• organisations

• professional:

o British Computer Society (BCS)

o The Institution of Analysts and Programmers (IAP)

o Chartered Institute of Information Security (CIISec)

• governmental.

4.2.2 Understand how guidelines in codes of conduct influence professional

behaviour:

• ensure individuals follow policies, procedures and legislation

• ensure quality of work:

o minimising risk to the public

o acting with competence and integrity

• meeting deadlines

• effective communication

• maintaining confidentiality and trust.

4.2.3 Know the sources of digital industry standards:

• International Organization for Standardization (ISO)

• Web Content Accessibility guidelines (WCAG)

• World Wide Web Consortium (W3C®)

• Internet Engineering Task Force (IETF)

• Electronic Industries Alliance/Telecommunications Industry Association

(EIA/TIA)

• British Standard (BS)

• Institute of Electrical and Electronics Engineers (IEEE)

• Payment Card Industry Security Standards Council (PCI SSC).

4.2.4 Understand the purpose of acceptable use policies (AUP):

• purpose of AUP

• typical content:

o permitted activities

o prohibited activities

o working practices including confidentiality

o communication etiquette including projecting correct

organisation image

o sanctions/penalties.

4.2.5 Understand the importance of whistleblowing procedures.

4.2.6 Understand the interrelationships between digital support and

security and guidelines, and make judgements about the impact

on organisations, society and individuals