Information Governance Information Asset Owner Information Asset Administrator

Information Governance Information Asset Owner / Information Asset Administrator

What Are We Going To Cover? Responsibilities of an IAO / IAA Information Asset Register Information Risk Management Corporate Records Management Freedom of Information Records Quality

Responsibilities IAOs are responsible to the SIRO IAAs are support, also referred to as a Deputy for an IAO • To ensure that the Information Asset Register includes all assets within your area of responsibility • To ensure risk assessments are completed all key assets on an annual basis • To ensure compliance with the Corporate Records Policy within your area • To ensure compliance with Cyber Security and Information Governance • To ensure that you complete annual Information Governance Training • To understand data flows within your area

Information Asset Register List of all of the Information Assets that the Trust holds. The register includes: • Document information • Storage and Ownership • Review Process • Management of the document

Information Risk Management How secure and accessible are your assets? • • • Storage Access control Version control Disaster Recovery Archiving process Destruction process

Corporate Records Management What does this include? • • • Version control File structure; for electronic and manual files Retention and destruction Permanent preservation; ‘ 20 year rule’ Public document management Freedom of information – Publication Scheme

Freedom of Information Rights of Access to Corporate Information • Provides access to information held by Public Bodies • Provides members of the public a way to obtain information about how public money is being spent and check accountability of organisations • Provides access to Corporate Information; with the exception of when an exemption applies • Requires public bodies to actively publish information about the organisation • Records management

Records Quality • • • Track changes / version control Maintain original copies, agree document owner/originator Scanning protocols Abbreviations Audit Accessibility of electronic records

Data Flow Mapping Understanding all information flows throughout the Trust • • • Internal and External Regular and Adhoc Legitimacy of sharing Risk of sharing method Understand what is sent outside of the UK IG Toolkit requirement