Legal Precedents

1 Introduction We have carried out a firm-wide evaluation of the likelihood that our systems and/or services could be affected by cybercrime. This appraisal took account of: our key IT assets; the likeliest targets; possible attack types; our protective measures. 2 Critical IT/data assets We have identified our vital IT and data holdings. These comprise: client information; [ staff data; ] [ website; ] [ IT server; ] [ email server; ] [...

1 Introduction 1.1 Although remote working (at home or while travelling) and removable media deliver major advantages to our business and customers, they also introduce risks that can be difficult to control. 1.2 This policy outlines those risks and the procedures we use to lessen them. 2 Responsibility and application 2.1 [ State name or role, eg The Data Protection Officer ( DPO) ] holds responsibility for this policy. 2.2 This policy applies to all staff. 3 The risks Remote working and removable media involve moving and storing confidential and sensitive data outside the office’s secure environment, commonly via the internet and at times in public locations. This leaves us exposed to notable risks. 3.1 Loss or theft of data Portable devices are especially prone to loss or theft and may not benefit from the same physical...

1 Background information Full name of [ prospective ] supplier [ To be completed by customer ] Registered address [ To be completed by customer ] Short overview of services to be provided [ To be completed by customer ] Date the [ prospective ] supplier completed this questionnaire [ To be completed by customer ] Signature of the authorised representative of the [ prospective ] supplier [ To be completed by supplier/third party ] Name of the authorised representative [ To be completed by supplier/third party ] 2 Governance Who holds ultimate accountability within your organisation for managing information and cyber security? [ To be completed by supplier/third party ] When did the board most recently review information security, cyber security and cybercrime risk? [ To be completed by...

Please select the Precedent link. Please note this log was compiled in Excel, therefore it cannot be downloaded directly into Word at all...

Created to support staff training on cybercrime and cybersecurity, this Precedent presentation serves as an aid. It is not a technical manual; instead, it offers guidance to help organisations instruct their teams on measures used to control the risk of cybercrime. While it features several references to technical elements of cybercrime and cybersecurity, these are provided solely as general pointers for organisations to consider internally......

Threat Advanced persistent threat ( APT) What is it? Attackers obtain unauthorised access to a system and remain concealed for extended periods, potentially moving sensitive data without permission. Even once spotted, they may leave several backdoors so they can return. Our defensive measures We ensure users understand the risk and follow basic account security practices. We use firewalls to monitor and filter traffic. We use antivirus software. Botnet What is it? A group of infected computers remotely controlled by a hacker, who can share or sell access to other cyber criminals to send spam or overwhelm a system. Our defensive measures See Malware and Hacking Chain letter What is it? An email that pushes recipients to forward it to others. Not a security threat, but it wastes time and can slow email servers. Our defensive measures We advise users not to forward chain letters or hoaxes. We keep informed about chain...

Quarter 1— Confidential information This quarter’s pointers and reminders focus on carefully managing confidential information. For more detailed guidance, please refer to the following resources and policies: [ insert, eg Clear desk and clear screen policy ] [ insert, eg Remote working and removable media policy ] [ insert, eg Cybercrime prevention strategy and incident management plan ] [ insert, eg Confidentiality and disclosure policy ] [ insert, eg Information management and security policy ] [ insert, eg Internet, email and communications policy ] [ insert, eg Bring your own device ( BYOD) policy ] [ insert, eg Generative AI policy ] Month 1— Think ‘secure’ You handle significant and sensitive work. We all share a responsibility to ensure it remains protected and confidential. Always remember to lock your computer or any device when it’s not in use. Doing so helps to safeguard devices and keeps those vital matters...

[ insert name of company adopting the EMI scheme ] (the Company)—[ insert Company number ] Record of a meeting of the Company’s [ remuneration committee of the ] board of directors convened at [ insert place of meeting ] on [ insert date of meeting ] at [ insert time of meeting ] Present: [ insert name of director to be Chair ] (the Chair) [ insert names of directors present ] In attendance: [ insert names of those in attendance ] Apologies: [ insert names of directors who are unable to attend meeting ] 1 Notice and quorum [ insert name of Chair ] took the role of Chair for the meeting. It was confirmed that valid notice of the meeting had been provided in accordance with the Company’s articles of association ( Articles), and that a quorum was...

1 Please provide full details of the Company’s compliance with the CRC Energy Efficiency Scheme (the initial phase: 1 April 2014 – 31 March 2019) ( CRC Scheme), including: 1.1 Confirm if the Company is participating in the CRC Scheme and state the qualifying basis. Indicate whether it operates as a standalone company, forms part of a group (within the meaning of Art 3 of the CRC Energy Efficiency Scheme Order 2013, as amended, SI 2013/1119), or is treated as a disaggregated subsidiary......

Health and safety Please supply, where relevant, records covering: Health and safety policy; certifications ( ISO 45001/45004, contractor accreditation); contents/index of the management system. Risk-based documentation: sample risk assessments (incl. explosion); COSHH inventory and assessments ( SI 2002/2677); COMAH notifications, Major Accident Prevention Policy and, where relevant, Site Safety Report ( SI 2015/483). Asbestos: surveys, register, management plans, clearance certificates, periodic checks, or basis confirming no asbestos. Fire safety: risk assessment and actions; inspection/maintenance of alarms, emergency lighting, extinguishers/sprinklers, smoke vents, dry/wet risers. Electrical and gas: most recent fixed‑wiring inspection and actions; latest gas plant service records. Water hygiene: legionella risk assessment/audit and management records (treatment, tank cleans, temperature checks); cooling tower/evaporative condenser notifications to the local authority. Lifting and machinery: inspection/test records, machinery safety assessments and example periodic/pre‑shift checks. Occupational exposure: noise surveys and airborne monitoring for any specified chemicals; ionising radiation records (personal dosimetry, authorised users, local rules, safety audit, risk...

Key information Information details Firm name [ Insert details ] Role holder’s name [ Insert name ] Reporting line [ Insert details ] Type of role [ Insert, e.g. full-time/part-time/contractor ] [ If a contractor role, include length of contract ] Primary location [ Insert the main location for this role—if the post-holder is expected to spend regular time across multiple sites, e.g. in each regional office, ensure this is stated clearly ] Working pattern: remote/hybrid/office-based [ Insert type of work model ] Start date [ Insert date ] Probation length [ Insert details ] Probation review end date [ Insert date ] Role summary The core elements of the marketing/business development manager role are: Strategic marketing – carry out the necessary analyses, set objectives aligned to the business plan, and shape strategies and...

Learning and development ( L& D) plan Coverage period: [ Insert period ] 1 Responsibility Accountability for this L& D plan rests with: [ Insert the name of the individual accountable for this plan, e.g. head of L& D/head of HR/training partner/other ] 2 Business objectives What are the firm’s business objectives? [ Insert business objective(s) drawn from the business plan, e.g. to attain net profit of 30% of turnover within the year ] In what ways can L& D enable the firm to realise its business goals?......

[ insert name of company adopting the CSOP ] ( Company)—[ insert Company number ] Minutes of a meeting of the [ remuneration committee of the ] board of directors of the Company convened at [ insert place of meeting ] on [ insert date of meeting ] at [ insert time of meeting ]. Present [ insert name of director to be Chair ] (the Chair) [ insert names of directors present ] In attendance [ insert names of those in attendance ] Apologies [ insert names of directors who are unable to attend meeting ] 1 Notice and quorum The meeting appointed [ insert name of Chair ] as Chair. It was noted that due notice of the meeting had been provided in line with the Company’s articles of association ( Articles) and that a quorum was present....

Precedent Transfer A flexible Word edition of the TR1 precedent can be accessed via the link provided here, allowing easy download, saving, or printing. Drafting notes to precedent transfer General Any references to 'panels' in these drafting notes point to the panels contained in HM Land Registry form TR1. TR1 is the prescribed document for transferring the entirety of freehold or leasehold land under the Land Registration Rules 2003......

Precedent Transfer A flexible Word edition of the TR1 precedent can be downloaded, stored or printed using the link on this page. Drafting notes to precedent transfer General Any mention of ‘panels’ in these drafting notes refers to the panels in HM Land Registry form TR1. The TR1 is the prescribed document, under the Land Registration Rules 2003, for transferring the whole of freehold or leasehold land. Form TR1 can also be used for transfers of the entirety of unregistered land where the disposition triggers compulsory registration, or where the transferee is certain that a voluntary application for registration will be made......

Precedent Transfer An editable Word edition of the TR1 precedent can be obtained via the link directly on this page, downloaded, then saved or printed if and when needed. Drafting notes to precedent transfer – General: Any mention of ‘ Panels’ in these drafting notes relates to the panels in HM Land Registry form TR1. TR1 is the prescribed instrument for transferring the entirety of freehold or leasehold land under the Land Registration Rules 2003. The form may likewise be used to transfer the whole of unregistered land where the disposition triggers compulsory registration, or where the transferee intends to submit a voluntary application for registration......

L& D policy—staff survey Your views are extremely important to us, helping us to further improve our learning and development ( L& D) offering. Please kindly complete and return this form. Question Score Feedback How would you assess our current learning provision?......

Background information Name Position Department/unit Contact information Course completed Course date Course review Has the initially identified business need been resolved? ☐ Yes ☐ No If yes, kindly specify how this has been resolved......

1 Executive summary Insert a concise overview capturing the primary recommendations set out in this document. 2 What is the business need? Provide specifics on the performance adjustments required to meet the organisation’s needs. Describe how targeted training offers the most effective route to achieving these performance improvements. 3 What external factors are affecting the firm? Set out the external influences impacting the firm that should be addressed through L& D......

1 About you Forename Position Division / Group Contact information 2 About the course you want to attend Course name Training provider Course fee Anticipated travel / accommodation expenses Venue for the course ☐ Virtual ☐ In-person Session date Who recommended that you attend this course?......