Digital Trust & Information Governance

Digital Trust & Information Governance

The Council uses several kinds of records: member profiles, appointments, publications and issued documents. This guide explains what each can establish, where its limits lie and why an accessible reference number is not, by itself, proof of authenticity. It describes role-based administration, changes to privileges, secure retention of personal information and the separation of public profiles from private application evidence. It also distinguishes the SHA-256 fingerprint of a file from a valid institutional signature. The framework recommends that the current edition and previous signed editions remain separately available, with any verification result drawn from the actual protected register rather than from a QR code or label alone.

Inside this document

1. Trust begins with a reliable record
2. Access and accountability
3. Personal data and retention
4. Document authenticity and versioning
5. Security operations and incident handling
6. Accessibility and responsible automation