Corporate Objective No 3: To Pursue and Deliver Excellence through Continuous Improvement Report on Board Action Plan Risk Description Current Controls Assurances By Whom Comment (Include DATE Risk Score End Action ADDED) Date L I S Rate 11. Fail to 3 3 9 Medium Policy & Procedures CAS Assessment - Ensure regular DoHRCS implement Information Records Management update on Data Apr -Mar robust information Governance / Records /ICT/Governance (I) & Protection and 2017 governance Mgt (E) Information refresher training is process. CA Standard Governance Group available. Audit Control Report (I) Service Risk Risk Register/ Action Reporting & Review (I) GAC Audit Control Risk Owner Review (I) other CA Dir of HRCS A range of IG policies Standards Assessment Dirs renewed and agreed (I) & (E) Mid-Year by Board over 2014/15 Assurance Statement / and 2015/16. GS (I) GAC Report (I) CX Review of Dirs Objectives (I) IGMG to maintain and progress action plan Information Action plan DoHRCS BSO assessed as Type of risk: sub-group established Management Controls implemented and Apr -Mar Substantive Legislative / to review the new Assurance Standard evidence gathered 2016 Compliance for Regulatory & standard and compare has been issued by on ongoing basis. in line with Performance with the current DHSSPS Regular progress DHSSPS Management standard. reports to SMT. expectations. SIRO annual BSO to carry out Audits of local record assurance letter to periodic checks of management policies Permanent Secretary files in transit. underway as part of IG Improvement Plan Regular progress to March 2016). reports to Internal Audit regarding action plans assessment of the (I) Information Management Controls
Corporate Objective No 3: To Pursue and Deliver Excellence through Continuous Improvement Report on Board Action Plan Risk Description (Include DATE ADDED) Current Risk Score Controls Assurances Action By Whom End Date Comment L I S Rate 11. Fail to implement robust information governance process. Risk Owner Dir of HRCS Dirs Type of risk: Legislative / Regulatory & Performance Management 3 3 9 Medium Policy & Procedures Information Governance / Records Mgt CA Standard Audit Control Risk Register/ Action A range of IG policies renewed and agreed by Board over 2014/15 and 2015/16. IGMG to maintain and progress action plan sub-group established to review the new standard and compare with the current standard. Audits of local record management policies underway as part of IG Improvement Plan to March 2016). CAS Assessment - Records Management /ICT/Governance (I) & (E) Information Governance Group Report (I) Service Risk Reporting & Review (I) GAC Audit Control Review (I) other CA Standards Assessment (I) & (E) Mid-Year Assurance Statement / GS (I) GAC Report (I) CX Review of Dirs Objectives (I) Information Management Controls Assurance Standard has been issued by DHSSPS SIRO annual assurance letter to Permanent Secretary Regular progress reports to regarding action plans (I) Ensure regular update on Data Protection and refresher training is available. Action plan implemented and evidence gathered on ongoing basis. Regular progress reports to SMT. DoHRCS Apr -Mar 2017 DoHRCS Apr -Mar 2016 BSO assessed as Substantive Compliance for in line with DHSSPS expectations. BSO to carry out periodic checks of files in transit. Internal Audit assessment of the Information Management Controls
Corporate_RA_Report_June_2016.docx