11. MONITORING COMPLIANCE WITH PROCEDURAL DOCUMENTS This document will be monitored to ensure it is effective and to assurance compliance. Minimum requirement to Frequency of Report Lead(s) for acting on Lead Tool Reporting arrangements be monitored of Compliance Recommendations Appropriate confidentiality & HR representative to the To be assigned by Data security clauses are Report to Data Protection Report to Data Protection & Data Protection & Data Annually Protection & Data Quality included in terms & & Data Quality Committee Data Quality Committee Quality Committee Committee conditions of employment Information Governance To be assigned by Data IT assets are recorded in Manager & Information Report to Data Protection Report to Data Protection & Annually Protection & Data Quality appropriate asset registers Security Management & Data Quality Committee Data Quality Committee Committee Assurance Lead Information Governance System Security Policies Annual summary of position To be assigned by Data Manager & Information IG Toolkit compliance for core IT assets & key Annually to Data Protection & Data Protection & Data Quality Security Management returns IT systems Quality Committee Committee Assurance Lead Information Governance Risk assessments of core IT Annual summary of position To be assigned by Data Manager & Information IG Toolkit compliance assets & key IT systems are Annually to Data Protection & Data Protection & Data Quality Security Management returns regularly undertaken Quality Committee Committee Assurance Lead Adequate business Information Governance continuity/disaster recovery Annual summary of position To be assigned by Data Manager & Information IG Toolkit compliance plans exist for core IT assets Annually to Data Protection & Data Protection & Data Quality Security Management returns & key IT systems that are Quality Committee Committee Assurance Lead regularly tested IT Guidelines for Managing & Safely Using IT Resources IT Department nominated Report to Data Protection Report to Data Protection & Annually Not applicable is regularly reviewed & responsible & Data Quality Committee Data Quality Committee updated
11. MONITORING COMPLIANCE WITH PROCEDURAL DOCUMENTS This document will be monitored to ensure it is effective and to assurance compliance. Minimum requirement to be monitored Lead Tool Frequency of Report of Compliance Reporting arrangements Lead(s) for acting on Recommendations Appropriate confidentiality & security clauses are included in terms & conditions of employment HR representative to the Data Protection & Data Quality Committee Report to Data Protection & Data Quality Committee Annually Report to Data Protection & Data Quality Committee To be assigned by Data Protection & Data Quality Committee IT assets are recorded in appropriate asset registers Information Governance Manager & Information Security Management Assurance Lead Report to Data Protection & Data Quality Committee Annually Report to Data Protection & Data Quality Committee To be assigned by Data Protection & Data Quality Committee System Security Policies for core IT assets & key IT systems Information Governance Manager & Information Security Management Assurance Lead IG Toolkit compliance returns Annually Annual summary of position to Data Protection & Data Quality Committee To be assigned by Data Protection & Data Quality Committee Risk assessments of core IT assets & key IT systems are regularly undertaken Information Governance Manager & Information Security Management Assurance Lead IG Toolkit compliance returns Annually Annual summary of position to Data Protection & Data Quality Committee To be assigned by Data Protection & Data Quality Committee Adequate business continuity/disaster recovery plans exist for core IT assets & key IT systems that are regularly tested Information Governance Manager & Information Security Management Assurance Lead IG Toolkit compliance returns Annually Annual summary of position to Data Protection & Data Quality Committee To be assigned by Data Protection & Data Quality Committee IT Guidelines for Managing & Safely Using IT Resources is regularly reviewed & updated IT Department nominated responsible Report to Data Protection & Data Quality Committee Annually Report to Data Protection & Data Quality Committee Not applicable
IT%20Security%20Policy.docx