scope:

This standard applies to the activities of all TfL employees, managers, officers, Directors, consultants and contractors.

Specifically, it applies to TfL's Information Technology (IT) and IT infrastructure resources when implementing the controls stipulated in the standard, as set by the TfL Cyber Security team.

Purpose

This standard defines the requirements for the management and secure operation of TfL's information processing facilities in order to prevent exploitation of technical vulnerabilities, to protect the integrity of information operation systems and to collect and store data securely.