Oct 2012: NHS Scotland approach to Information Governance - Colin Howarth
Colin is the lead for the Information Governance for connecting to N3 in Scotland. He notes that the rules are essentially the same in Scotland as in England but they use a Manual of Information Security/NHS Scotland Information Security Policy with direct review rather than the policies covered by the online Information Statement of Compliance including the Information Governance Toolkit process as in England.
Colin stressed that a risk management approach is essential and is the basis of ISO27001, very much the basis of the policy. There is a body of knowlege and good practice e.g. Her Majesty's Government Information Assurance Standards. It is recommended that a well made case for the connectivity should be the first step and if well made then takes you a long way. Further recommended:
