information security

        your information and network security needs taken care of

NHS INFORMATION GOVERNANCE

Why is this service required?

Information Governance relates to the way organisations 'process' or handle information. It covers personal information, ie that relating to patients/service users and employees, and corporate information, eg financial and accounting records.

Information Governance provides a way for employees to deal consistently with the many different rules about how information is handled, including those set out in:

       The Data Protection Act 1998.

       The common law duty of confidentiality.

       The Confidentiality NHS Code of Practice.

       The NHS Care Record Guarantee for England.

       The Social Care Record Guarantee for England.

       Information security standard: ISO 27002.

       The Information Security NHS Code of Practice.

       The Records Management NHS Code of Practice.

       The Freedom of Information Act 2000.

What is this service?

Aston Information Security is one of the most experienced companies in the UK in advising and auditing NHS trusts on information governance and security, as well as auditing their Commercial Third Parties (CTP) and service providers e.g. GP practices, pharmacies.

Aston has advised, consulted, implemented, delivered training and audited all aspects of the Information Governance toolkit to over 35 NHS trusts.

We provide:-
       training and support for Caldicott Guardians, Senior Information Risk Officers (SIRO),
        Information Asset Owners (IAO) and Information Asset Administrators (IAA)
       implement local monitoring of and accountability for national standards
       clear and enforceable practice in relation to all providers to the NHS, including independent
        providers/Commercial Third Parties
       contractual requirements for all staff (including staff not employed by the NHS)
       Information Governance toolkit assurances

Customer Benefits

       Effective information governance
       Public con?dence that electronic NHS is secure
       Ensure necessary safeguards for, and appropriate use of, patient and personal information.
       Demonstrate clarity, accountability, transparency, coherence and consistency
       Provide sound policy, standard setting, independent oversight and monitoring,
       Standards of practice for confidentiality and patient consent to information sharing.
       The technical assurance of the safeguards protecting patient data, through clear guidelines.

Contact us to find out how we can help.