FOI/2025/26/174
Read more about this page below
| Reference | FOI/2025/26/174 |
|---|---|
| Description | Information Asset Ownership and Data Governance Roles |
| Date requested | 07/08/2025 |
| Attachments | N/A |
Request
Name of organisation SIRO (Senior Information Risk Owner) or similar post (Chief Information Governance Officer etc), or responsible person for SIRO duties. There may be more than one SIRO.
Jenny Greenshields, Chief Finance Officer and Director of Corporate Services
Contact email of person or persons named in question 1.
Name of organisation DPO (Data Protection Officer) or responsible person for DPO duties.
We will be applying section 21 of the FOI ACT 2000 as information is publicly accessible in our trust website Privacy statement :: Central London Community Healthcare NHS Trust
Contact email of DPO.
Please see response to Q3.
Have you appointed, or do you plan on appointing or delegating the position of IAO to any employees?
Yes, IAOs are employees of CLCH.
Who is responsible for the leading IAO structure, I.E. the SIRO/’Lead’ IAO/Head of Governance/Head of Corporate Services etc?
Head of Information Governance and DPO
Who is responsible for reviewing and implementing any training needs for the IAO’s?
Head of Information Governance and DPO
In relation to questions 6 and 7, can we please be provided with the contact email address of the appropriate person?
Please see response to Q3
Is IAO training delivered by an external third party or internally?
IAO training is provided internally.
Are you or have you considered becoming ISO 27001 compliant or certified? If so when?
Yes, The Trust is accredited via IT Supplier.
Following on from Q10, If so whom is/would be responsible for implementation or exploration of ISO 27001? (as in, the person/job title/email address)
Not applicable. Please refer to response in 10 above.
Who is the person responsible for the physical security controls in your estate e.g. CCTV, Lighting, barriers, intrusion detection and fencing.
Maintained by ISS under Capita contract
In relation to question 12 when was the effectiveness of these controls last reviewed?
As per Capita contract/building estate checks plan undertaken by ISS (quarterly)
In relation to question 12 can we please be provided with the name/job title and email address of this person
Ian Daccus, Director Estates. Enquiries should be submitted to clcht.security@nhs.net
Who would be the person responsible for the organisation of external training within your organisation. E.g. Head of learning and development / HR Manager. Sarah Quinn, Assistant Director of the CLCH Academy
Can you please provide the name/job title and email address for the person in question 15? Sarah Quinn, Assistant Director of the CLCH Academy. sarah.quinn21@nhs.net