Loading
The Cabinet Member for Organisation and Workforce considered five council policies on staff probation, information security and digital devices. The policies are the revised Probationary Policy, the Cyber and Information Security Policy, the Internet Usage and Monitoring Policy, the Portable Device Usage Policy and the Bring Your Own Device (BYOD) Policy. The minutes record that the Cabinet Member approved each one.
There were no declarations of personal interest.
Decision as recorded
RESOLVED that the decision record of the meeting held on the 4th September 2026 be signed as a correct record.
RESOLVED that the decision record of the meeting held on the 4th September 2026 be signed as a correct record.
Decision as recorded
RESOLVED TO APPROVE the revised Probationary Policy.
The revised Probationary Policy was presented for approval in response to forthcoming changes arising from the Employment Rights Act 2025. It was noted that, from 1 January 2027, the qualifying period for ordinary unfair dismissal claims would reduce from two years to six months’ continuous service, with the existing statutory cap on compensation also being removed. It was noted that the revised policy strengthened arrangements for managing probationary periods, including: • clearer responsibilities for managers in monitoring and reviewing performance; • formal probation reviews at six weeks and three months; • improved recording of discussions and outcomes; • provision to extend probation up to five months where performance measures had not been met, following HR advice; and • ensuring that decisions to terminate employment during probation followed a fair and proportionate process. It was noted that the changes were intended to ensure that performance, conduct, attendance and capability issues were identified and addressed at an earlier stage, while reducing the risk of successful employment tribunal claims. Human Resources and Learning and Development would support implementation through appropriate manager guidance, advice and training. The Cabinet Member sought reassurance that managers would confirm that they had read, understood and implemented the revised policy. It was confirmed that completion of the relevant e-learning could be monitored and that managers who had not completed the training could be targeted proactively, although the e-learning was not currently mandatory. It was also noted that manager alerts would be established through ResourceLink to prompt the completion of formal probationary reviews. It was confirmed that the policy covered Council employees, while schools would be encouraged to adopt it as a model policy, recognising that teachers were subject to separate probationary arrangements. RESOLVED TO APPROVE the revised Probationary Policy.
Decision as recorded
RESOLVED TO APPROVE the updated Cyber and Information Security Policy.
The Cabinet Member considered the revised Cyber and Information Security Policy, which had been updated to reflect developments in cyber and information security, regulatory requirements and the Council’s wider policy framework. It was noted that the revised policy had: • formally established the Cyber and Information Security Policy as the Council’s Acceptable Use Policy, with the Acceptable Use provisions to be reviewed annually; • strengthened controls relating to Council devices, personal devices and unauthorised applications; • clarified responsibilities for staff, managers, Heads of Service, Information Asset Owners and Digital Services, including mandatory cyber security and data protection training; • introduced requirements relating to Generative AI, including restrictions on entering confidential or sensitive information into AI systems without explicit authorisation; • adopted a Zero Trust approach, including continuous authentication, least-privilege access and enhanced controls for privileged accounts; • clarified the approval arrangements for suspending accounts, accessing activity logs and monitoring electronic communications; • strengthened requirements concerning suppliers and third-party cyber security; and • introduced arrangements for regular policy review to respond to significant incidents and regulatory changes. It was noted that the revised policy was intended to maintain a robust information security framework, comply with relevant statutory and regulatory requirements, and provide clarity regarding roles and responsibilities. RESOLVED TO APPROVE the updated Cyber and Information Security Policy.
Decision as recorded
RESOLVED TO APPROVE the revised Internet Usage and Monitoring Policy.
The Cabinet Member considered the revised Internet Usage and Monitoring Policy, which had been updated to reflect modern working practices, current legislation and strengthened cyber-security requirements. The revised policy clarified acceptable internet use, monitoring arrangements and approval procedures, and applied to officers, elected members, contractors, agency staff and volunteers using Council systems or devices. RESOLVED TO APPROVE the revised Internet Usage and Monitoring Policy.
Decision as recorded
RESOLVED that the revised the revised Portable Device Usage Policy be approved.
The Cabinet Member considered the revised Portable Device Usage Policy, which set out the Council’s framework for the secure and appropriate use of portable and mobile devices accessing Council systems or handling Council data. It was noted that the policy had been updated to reflect modern hybrid working arrangements, cloud services and increased cyber-security risks. The revisions clarified the distinction between corporate-owned devices and Bring Your Own Device arrangements, strengthened cyber and information security governance, and aligned the policy with the Council’s wider Cyber and Information Security framework. The revised policy also introduced clearer controls for the use of portable devices outside the UK, including a requirement for prior authorisation and additional advice from the Data Protection Officer and Cyber Security Manager for travel outside the European Economic Area. It was noted that the policy applied to staff and other authorised users and was intended to reduce the risks of data loss, compromise or unauthorised access while supporting compliance with data protection requirements. RESOLVED that the revised the revised Portable Device Usage Policy be approved.
Decision as recorded
RESOLVED that the revised Bring Your Own Device Policy be approved.
The Cabinet Member considered the revised Bring Your Own Device (BYOD) Policy, which established arrangements for the secure use of personally owned smartphones and tablets to access Council systems and information. The revised policy clarified the approval process and user responsibilities, strengthened device security controls, and aligned BYOD arrangements with the Council’s wider cyber and information security framework. It also supported compliance with UK GDPR and the Data Protection Act 2018 and aimed to reduce the risks of data loss, unauthorised access and inappropriate use of personal devices. RESOLVED that the revised Bring Your Own Device Policy be approved.
Councillors must say when they have a personal link to something being discussed, such as a job, a property or a family member. A prejudicial interest is one strong enough that the councillor usually leaves the room and takes no part.
Declarations are read from the minutes once they are published.
Lists the council's current councillors only. Co-opted members, officers and former councillors aren't shown.