Information Governance Toolkit
The new version of the IG Toolkit, version 9, was released on 6th June, and as expected, there are no changes to the requirements. As described in the Change note, which is available from the IGT website, there are some updates to the guidance.
Some new and updated Good Practice Guides have also been published; details of these can be found in the Knowledge Base section of the relevant requirements.
What does this mean for you?
Large NHS organisations (Acute Trusts, Mental Health Trusts, Commissioning Organisations, Ambulance Trusts) will be expected to return to the completion of the 3 stage reporting process. If you are undertaking an IG assessment for one of these organisation-types you must carry out the following stages:
- Baseline assessment by 31 July 2011
- Performance update by 31 October 2011
- Final submission by 31 March 2012
- There are three new views in the toolkit:
In addition, there are three new views of the toolkit for organisations connecting to N3:
- Hosted Secondary Use Team
- Dispensing Appliance Contractor (DAC)
- Voluntary Sector Organisation
The following statement has been published on the IGT Web site:
“The fact of a completed IGSoC does not remove the requirement for commissioners to assure themselves that their providers/suppliers are meeting and maintaining information governance standards. Commissioners should therefore take into account the following information:
Where an organisation has assessed itself as meeting the IGSoC requirements to an appropriate level, and has recorded its assessment within the IG Toolkit, this provides a clear and structured basis for auditing the organisation to obtain assurance that IG standards are being met.
A self-assessed IGSoC does not itself provide this assurance and bodies contracting, or otherwise engaging, with organisations who have gone through the IGSoC process must ensure themselves that there is robust evidence of performance.
It is the responsibility of all NHS Contracting Authorities to ensure that appropriate IG assurance is obtained when contracting for the delivery of information services.”
How can Hytec help?
Hytec’s IG Toolkit Gap Analysis is designed to help trusts bridge the gap between where they are now, and where they want to be. It is carried out by one of our senior Information Assurance Consultants and is tailored to the size and type of your organisation.
By studying your previous IG Toolkit assessments, we can identify the areas which need to be addressed and formulate a plan of action.
The purpose of the Gap Analysis service is to:
- assess the IG already in place
- review the last IG Toolkit submission and results, and recommendations
- identify the areas where improvements are needed
- scope the need for technical reviews, including penetration or vulnerability testing
- review or produce policies, and other supporting documentation, processes, procedures and standards together with awareness programmes to ensure that staff and partners adhere to the requirements of the IG Toolkit
- formulate a plan of action, with recommendations on how you can best make changes to fit the criteria needed.
To request more information, or to speak with one of Hytec's Information Assurance consultants, please click here.