Corporate Objective No 3: To Pursue and Deliver Excellence through Continuous Improvement Report on Board Action Plan Risk Description Current Controls Assurances By Whom Comment Risk Score End (Include DATE Action ADDED) Date L I S Rate 14. Pressure from 3 4 12 High HSC Security Policy; Completion of report HSCB to organise a DoHRCS Meeting of Trust organisations to into the security regional meeting to SIROs to review the deploy mobile and HSC organisations implications of recent address this with September output of ANSEC hand held devices code of connections; requests; a view to developing 2015 report was held on compromises an effective system 29th April 2015. overall HSC to protect information Unfortunately this security and Discussion with which has the meeting was not well increases the risk HSCB/DHSSPS led to support of BSO and attended by the SIROs of access to understanding of all of HSCNI. and the outcome was systems and shared data guardian inconclusive because records roles and HSCB of this poor issuing a new HSC ICT attendance. Security Policy. Risk Owner Sean Donaghy is to Dir of HRCS set up a further Dirs meeting and to ensure SIRO attendance at this. Type of risk: Legislative / Regulatory; Technological; Customer/citizen; Risk Added: 29.01.15
Corporate Objective No 3: To Pursue and Deliver Excellence through Continuous Improvement Report on Board Action Plan Risk Description (Include DATE ADDED) Current Risk Score Controls Assurances Action By Whom End Date Comment L I S Rate 14. Pressure from organisations to deploy mobile and hand held devices compromises overall HSC security and increases the risk of access to systems and records Risk Owner Dir of HRCS Dirs Type of risk: Legislative / Regulatory; Technological; Customer/citizen; Risk Added: 29.01.15 3 4 12 High HSC Security Policy; HSC organisations code of connections; Completion of report into the security implications of recent requests; Discussion with HSCB/DHSSPS led to understanding of shared data guardian roles and HSCB issuing a new HSC ICT Security Policy. HSCB to organise a regional meeting to address this with a view to developing an effective system to protect information which has the support of BSO and all of HSCNI. DoHRCS September 2015 Meeting of Trust SIROs to review the output of ANSEC report was held on 29th April 2015. Unfortunately this meeting was not well attended by the SIROs and the outcome was inconclusive because of this poor attendance. Sean Donaghy is to set up a further meeting and to ensure SIRO attendance at this.
Corporate_RA_Report_Oct_2015.docx