How to be a Senior Information Risk Owner

Speaker: Naomi Matthews

The role of the Senior Information Risk Owner (SIRO) has grown from a mandatory role in Health & Social care to a role utilised by a wide range of organisations in the public and private sector.

Regardless of your background this practical workshop will take you through what the role of the SIRO is for both Health & Social Care and further afield. We will look at examples of best practice & standards, current trends and common risks, and look at where you want the role to go within your organisation.

If you are a SIRO (either new or have been for a while) or are someone that will be working with the SIRO this workshop is for you.

By the end of this workshop you will have an understanding of the role of the SIRO, what it covers, the SIRO's role in Information Asset Management, how it interacts and is supported by other roles and how to make the SIRO role your own.

Key Topics

• Role of the SIRO
• Key roles in managing information
• Defining our 'information' that we want to protect
• Governance of Information (laws and standards) basics
• Role of the SIRO in Data Protection, FOI & others
• Data Protection Impact Assessments & the SIRO
• Information Risk Management basics and key elements
• What is the information lifecycle and why is it important?
• What is an asset and information mapping and why is it useful to the SIRO?
• Incident Management & the SIRO
• Fostering a data handling culture
• Establishing an Information Risk framework
• Developing the SIRO role