Corporate Objective No 3: To Pursue and Deliver Excellence through Continuous Improvement Report on Board Action Plan Risk Description Current Controls Assurances By Whom Comment (Include DATE Risk Score End Action Date L I S Rate 14. Fail to 3 3 9 Medium Policy & Procedures CAS Assessment - Ensure regular DoHRCS implement Information Records Management update on Data Apr -Mar robust information Governance / Records /ICT/Governance (I) & Protection and 2016 governance Mgt (E) Information refresher training is process. CA Standard Governance Group available. Audit Control Report (I) Service Risk Risk Register/ Action Reporting & Review (I) Plans GAC Audit Control Risk Review (I) other CA Dir of HRCS A range of IG policies Standards Assessment renewed and agreed at (I) & (E) Mid-Year Dirs August, September & Assurance Statement / October 2013 Board GS (I) GAC Report (I) meetings. CX Review of Dirs Objectives (I) New IGMG sub-group New Information Action plan being DoHRCS BSO self-assessed as Type of risk: established to review Management Controls implemented and Apr -Mar Substantive Legislative / the new standard and Assurance Standard evidence gathered 2016 Compliance for Regulatory & compare with the has been issued by on ongoing basis. 15 in line with Performance current standard. DHSSPS who have Regular progress DHSSPS Management asked HSC reports to SMT. expectations. Assessment by Internal organisations for February 2014 comments.
Corporate Objective No 3: To Pursue and Deliver Excellence through Continuous Improvement Report on Board Action Plan Risk Description (Include DATE Current Risk Score Controls Assurances Action By Whom End Date Comment L I S Rate 14. Fail to implement robust information governance process. Risk Dir of HRCS Dirs Type of risk: Legislative / Regulatory & Performance Management 3 3 9 Medium Policy & Procedures Information Governance / Records Mgt CA Standard Audit Control Risk Register/ Action Plans A range of IG policies renewed and agreed at August, September & October 2013 Board meetings. New IGMG sub-group established to review the new standard and compare with the current standard. Assessment by Internal February 2014 CAS Assessment - Records Management /ICT/Governance (I) & (E) Information Governance Group Report (I) Service Risk Reporting & Review (I) GAC Audit Control Review (I) other CA Standards Assessment (I) & (E) Mid-Year Assurance Statement / GS (I) GAC Report (I) CX Review of Dirs Objectives (I) New Information Management Controls Assurance Standard has been issued by DHSSPS who have asked HSC organisations for comments. Ensure regular update on Data Protection and refresher training is available. Action plan being implemented and evidence gathered on ongoing basis. Regular progress reports to SMT. DoHRCS Apr -Mar 2016 DoHRCS Apr -Mar 2016 BSO self-assessed as Substantive Compliance for in line with DHSSPS expectations. 15
CorporateRiskReport.docx