London Thames Gateway Development Corporation
Data handling requirements
In June 2008 the Cabinet Office’s Hannigan and Coleman reviews were published, along with a comprehensive summary of the requirements for data handling – the Cross Government Actions: Minimum Mandatory Measures. This response to the much-publicised losses of sensitive information has put information assurance at the top of the priorities list for all public bodies.
The London Thames Gateway Development Corporation (LTGDC) is the key government agency responsible for delivering social and economic growth to transform the London Thames Gateway, which forms part of Europe’s largest regeneration area. Its development will make a significant contribution to the local and national economy. In October 2008, Bramble.cc was invited by LTGDC to conduct an independent review of its position against the mandatory minimum measures to protect information and identify where improvements might be made to procedural and technical operations in order to mitigate information management risks.
Analysis
The review conducted by Bramble.cc addressed compliance in information management and IT security policies and procedures, and their implementation. The analysis also included a strategic plan for the development and implementation of the policies and procedures required by the Hannigan report, and for the implementation of IT (within an ISO17799 framework) to support these and Government security standards.
Risk management
Responsible for a multi-million pound investment programme to realise East London’s economic potential, LTGDC is also focused on ensuring information assurance and risk management. “Being the Government’s lead regeneration agency for the Thames Gateway, it is vital that we ensure confidence in our information infrastructure and have in place clear policies that mitigate any risks to the information we handle,” said Ben Keeping, who is responsible for information security management at LTGDC. As a specialist consultancy devoted to providing expert information management and assurance to government clients, Bramble has been able to provide LTGDC with unique tool-kits for compliance assessment, benefits analysis, cost calculation and implementation management. Bramble.cc’s expert consultants have been able to bring clarity and decisiveness to LTGDC compliance requirements – there is more to be done, but the opportunities are great and Bramble.cc has been able to help get the process started rapidly and cost-effectively.