Information Governance Review
VEGA's corporate compliance services are based
on the practical application of current legislation and regulation,
and provide clients with confidence that they are conducting
business in accordance with these requirements. VEGA’s corporate
compliance approach focuses upon four stages:
- Review of current working
practices to identify any compliance gaps
- Risk Analysis and Risk
Management methods
- Development of policies and
procedures that comply with legislative requirements
- Training packages including
computer based training to increase staff awareness to meet
legislative requirements
Typical areas for attention include:
- Data Protection Policy
- Monitoring Policy
- Internet and Intranet Policies
- Acceptable Use Policy
- Employment Contracts
- Staff Handbook development
- The Security requirements in Service Level
Agreements
- ISO 27001/2 (BS7799/ISO 27799) compliance
- GSI and NHS Codes of Connection
Contact VEGA for further information about
information governance reviews