1. Improving Information Assurance in Central Government Steven Johnson London LibTeachMeet June 20, 2011

2. What’s brought us here….. In response to high profile data losses the Hannigan report of June 2008 looked at data handling across government

3. Protecting the public Delivering effective government Information Assurance contributes to this by ensuring information is –handled securely –accurate –available to the right people at the right time Why Information Assurance?

4. Files Databases Software Computer programs Disks Conversations Text messages ALL POTENTIALLY CREATE RISK Information Paper documents Memory sticks Email Mobile devices

5. What are information risks? Governance & CultureInfo management & technology Info availability & useThe human dimension Handling mistakes badly 3 rd parties let you down Despite procedures staff make mistakes Inappropriate disclosure Failure to disclose Poor records management Inaccurate/lost information

6. Secure – wrongly destroyed, lost, disclosed, leaked, stolen Confidentiality Integrity Availability HMRC UK Transplant Victoria Climbié NSPCC Hospitals Police Housing Social Services Available – not shared, system failure, wrongly classified, lost, misfiled, not readable Accurate – errors, data missing, data incomplete

7. HMRC UK Transplant Victoria Climbié Risks managed and public protected Info Assurance Define & implement policy Assign roles Implement procedures Educate & train staff Monitor & audit Information Assurance Roadmap Identify assets Manage risk Lead and foster a culture that values, protects and uses information for the public good Establish Governance

8. Useful links http://www.cesg.gov.uk/about_us/index.shtml http://www.cabinetoffice.gov.uk/resource-library/data-handling-procedures-government http://www.cesg.gov.uk/about_us/index.shtml http://www.cabinetoffice.gov.uk/resource-library/data-handling-procedures-government _____________________ Steven Johnson is a former civil servant who specialised in Information Management and Information Technology projects and roles including; as Project Support Manager for the Home Office Information Assurance Programme putting in place the Cabinet Office Data Handling Report requirements and most recently as the Deputy PMO Manager for the Next Generation IST Transformation (NGISTT) Programme to implement a shared IST infrastructure and services the Home Office Group need to work together in the most productive and cost effective way. http://www.linkedin.com/in/stevenjohnson9http://www.linkedin.com/in/stevenjohnson9 / stj_9@hotmail.comstj_9@hotmail.com Further Information