Dear List,
My organisation is developing an assurance framework which aims to show minimum statements of internal control on a number of compliance issues across business areas. We have been asked to come up with a question that will cover compliance with key information management issues. Respondents will need to identify which level of assurance they meet, i.e.
Full - Clear and unambiguous evidence of consistently effective management control across this business area with no identified weaknesses
Substantial - Clear evidence of consistently effective management control over this business area, albeit with a small number of minor weaknesses
Partial - Reasonable evidence of effective management control across this business area with numerous minor weaknesses or limited significant weaknesses identified
Weak - Limited evidence of effective management controls across this business area with significant weaknesses outnumbering areas of effective control
None - No or very limited evidence of effective management controls.
Does anyone else carry out this kind of exercise? If so, any examples of questions that have provided useful information would be very gratefully received.
Regards,
Susan.
Susan Payne
Force Records Manager
British Transport Police, Force Headquarters, 25 Camden Road, London NW1 9LN
office 020 7023 6983
mobile 07920 155 338
email [log in to unmask]
www.btp.police.uk
To view the list archives go to: https://www.jiscmail.ac.uk/cgi-bin/webadmin?A0=RECORDS-MANAGEMENT-UK
To unsubscribe from this list, send an email to [log in to unmask] with the words UNSUBSCRIBE RECORDS-MANAGEMENT-UK
For any technical queries re JISC please email [log in to unmask]
For any content based queries, please email [log in to unmask]
|