Information Security

8. Personnel security

Schools must validate the identity and suitability of staff, volunteers, and other persons who will have access to school information when they start with the school and revalidate and manage changes as required.

Pre-employment and engagement checks must be performed for:

• staff, as per the Suitability for Employment Checks policy
• volunteers and contractors, as per the Volunteers in Schools and Working with Children Checks and other Suitability Checks for School Volunteers and Visitors policies.

When validating personal information, prior to appointment or engagement, schools must:

• use the Employment hire/rehire checklist (DOCX) and the Employment in a government school – validation of personal information form (PDF) for any new employee
• ensure mandatory documentation is provided to confirm the personal information.

In addition, schools are required to:

• retain and dispose of identify verification records as per the School records retention guide (XLSX) (staff login required)
• have local off-boarding procedures in place for personnel leaving the school commensurate with their security obligations and risk profile including for locally acquired systems
• follow the personal security processes outlined in the Recruitment in Schools policy, when managing personal security.