OHC IG Improvement Progress Review Meeting notes.

1/1/2016

Executive summary

Following on from our previous IG assessment, at which we scored a mixture of Level 1 and Level 2, we are making good progress towards level 3 thanks to our IG Improvement Plan.

Documents and policies

At this meeting, the following documents were approved and all staff confirmed that they were aware of the existence:

• Personal information Disclosure guidelines
• Information Governance Policy
• Statement of information flow
• Example IG Contract clause
• Confidentiality Audit Procedure
• Transfer of Personal Information Procedure
• Reporting Unauthorised Access to Physical Premises
• Network Security Policy
• Remote Working
• Data Protection Purposes plan
• Business Continuity Plan

Spot Checks

In the last six months we have comlpeted a spot check on all relevant members of staff to assess compliance with all aspects of our IG and security Policy.

This included both existing, and new members of staff.

Our spot check uncovered no breaches of our policy. (Note, all relevant staff members report directly to the OHC IGL.)

Training

Having reviewed our current training, we feel it is appropriate for our current activities.

All staff with access to personal data have successfully completed our training programme.

Specific reviews

This process involved reviewing the following items, which were found to remain satisfactory.

• Access control and management processes.
• Access privileges for key assets
• Compliance with remote working security policy
• Information Asset Register
• Physical Security
• Business continuit plan table top exercise
• Information incident reporting
• Additional unkonwn information assets
• Compliance to mandatory security requriements