Corporate Objective No 4 To Ensure Good Governance Report on Board Action Plan Risk Description Current Controls Assurances By Whom Comment Risk Score Start Action – End L I S Rate Dates 11. Fail to 2 3 6 Medium Policy & Procedures CAS Assessment - Ensure regular DoHRCS implement Information Records Management update on Data Apr -Mar robust information Governance / Records /ICT/Governance (I) & Protection and 2015 governance Mgt (E) Information refresher training is process CA Standard Governance Group available. Audit Control Report (I) Service Risk Risk Register/ Action Reporting & Review (I) Plans GAC Audit Control Risk Review (I) other CA Dir of HRCS A of IG policies Standards Assessment renewed and agreed at (I) & (E) Mid-Year Dirs August, September & Assurance Statement / October 2013 Board GS (I) GAC Report (I) meetings. CX Review of Dirs Objectives (I) New IGMG sub-group New draft Information Frequency of DoHRCS Project Plan in process Type of risk: established to review Management Controls IGMG meetings Apr -Mar of implementation. Legislative / the new standard and Assurance Standard increased 2015 Regulatory & compare with the has been issued by Performance current standard. DHSSPS who have Following Management asked HSC assessment, organisations for action plan to be Initial assessment of comments. developed and BSO compliance with monitored by Audit planned for IGMG. standard for 2013-14 Autumn 2013 (I) indicates ‘moderate’ compliance as Discussion with required by DHSSPS. Regular progress HSCB / reports to SMT/Board DHSSPS on regarding action plans impact of Discussion with (I) greater HSCB/DHSSPS led to understanding of deployment of shared data guardian mobile devices and access to roles and HSCB
Corporate Objective No 4 To Ensure Good Governance Report on Board Action Plan Risk Description Current Risk Score Controls Assurances Action By Whom Start – End Dates Comment L I S Rate 11. Fail to implement robust information governance process Risk Dir of HRCS Dirs Type of risk: Legislative / Regulatory & Performance Management 2 3 6 Medium Policy & Procedures Information Governance / Records Mgt CA Standard Audit Control Risk Register/ Action Plans A of IG policies renewed and agreed at August, September & October 2013 Board meetings. New IGMG sub-group established to review the new standard and compare with the current standard. CAS Assessment - Records Management /ICT/Governance (I) & (E) Information Governance Group Report (I) Service Risk Reporting & Review (I) GAC Audit Control Review (I) other CA Standards Assessment (I) & (E) Mid-Year Assurance Statement / GS (I) GAC Report (I) CX Review of Dirs Objectives (I) New draft Information Management Controls Assurance Standard has been issued by DHSSPS who have asked HSC organisations for comments. Audit planned for Autumn 2013 (I) Regular progress reports to SMT/Board regarding action plans (I) Ensure regular update on Data Protection and refresher training is available. Frequency of IGMG meetings increased Following assessment, action plan to be developed and monitored by IGMG. Discussion with HSCB / DHSSPS on impact of greater deployment of mobile devices and access to DoHRCS Apr -Mar 2015 DoHRCS Apr -Mar 2015 Project Plan in process of implementation. Initial assessment of BSO compliance with standard for 2013-14 indicates ‘moderate’ compliance as required by DHSSPS. Discussion with HSCB/DHSSPS led to understanding of shared data guardian roles and HSCB
Corporate_RA_Report_June_2014.docx