Trust Board papers November 2012 - Barking Havering and ...

There are three key components underpinning this strategy:
• The Trust Information Governance Framework, which provides a
summary/overview of how the Trust is addressing the IG agenda
• The Trust Information Governance Policy, which outlines the objectives for
Information Governance; and
• The annual action plan arising from a baseline assessment against the standards
set out in the NHS Connecting for Health Information Governance Toolkit
4. To ensure there is a management structure to reflect IG requirements
Within the Trust, the Chief Executive Officer (CEO) has overall responsibility for
Information Governance (IG), this responsibility is discharged through the Executive
Chief Information Officer (from 3 rd December 2012). This individual is responsible for all
aspects of IG including the submission of the Connecting for Health’s Information
Governance Toolkit, is the chair of the Information Governance Steering Group (IGSG),
as well as being the Trust’s Senior Information Risk Officer (SIRO).
The SIRO is responsible for understanding how the strategic business goals of the
Trust may be impacted by information risks and for the ongoing development and dayto-day
management of the Trust’s Risk Management Programme for information privacy
and security. The SIRO will review and agree action in respect of identified information
risks, ensure that the Trust’s approach to information risk is effective in terms of
resource, commitment and execution and that this is communicated to all staff. In
addition they will provide a focal point of resolution and/or discussion of information risk
issues, and ensure the Board is adequately briefed on information risks.
The IGSG comprises of senior representatives from across the Trust and its
professional disciplines, to promote a holistic approach to IG. It has overall
responsibility for overseeing the implementation of the Information Governance
Strategy, Framework, IG Policy and any IG actions plans, by embedding IG within the
organisational structure, and sharing the responsibility for completion of the annual IG
Toolkit assessments. It is therefore vital to the development of best practices which are
acceptable, practicable, ‘owned’ and therefore better supported across the whole Trust,
and influences the integration and inclusion of IG standards with other governance,
strategies, work programmes and projects, e.g. IT programmes.
The IGSG is accountable to the Trust Board through the Executive Chief Information
Officer, the named Director on the Board with responsibility for Information Governance
(IG). This post is supported by the Director of Clinical Strategy who is the Trust’s
Caldicott Guardian, the Head of Commissioning, Information and Planning, the IG Lead
and members of the IGSG. The IGSG is a sub-group of the Quality and Safety
Committee. Terms of Reference and membership of the IGSG are defined in the Trust
document, ‘Information Governance Steering Group Terms of Reference’.
Developing an IG culture within the Trust will be achieved through IG training being
provided as part of the Trust’s mandatory corporate induction programme for new
Barking, Havering & Redbridge University Hospitals NHS Trust Page 4 of 9
Information Governance Strategy Version 1.3 Issued August 2012