Update April 2023

Following a resources re-prioritisation, the PM has been assigned to support efforts in the higher priority projet MVM317 Lothian Health Board Framework Agreement Implementation.

As a result, decision was taken to suspend this project at the Programme Review Monthly Meeting - April 2023.

MVM Head of IT and his deputy will review and refine the scope before the project is unsuspended.

 

Overview

CMVM is seeking to develop its own action plan in relation to information security, following internal audit work performed in CSE and CAHSS in late 2021. 

Within CMVM, development of good local practice will concentrate on the following prioritised areas -

  • local information security governance groups at relevant levels
  • establishing local information security roles and responsibilities
  • identifying the priority for gap analysis, either the whole College against the Information Security Policy and Standards or only for the areas encompassed by NHS Lothian Framework Agreement (the Scottish Government Cyber Resilience Framework)
  • undertaking the gap analysis and relevant actions (a separate project may be required depending on the priority)
  • maximising uptake of internal Information Security Essentials training
  • distribution of best practice information security guidance in easily understood and available formats to the CMVM community.  

Scope

Information security in CMVM; maximising adoption and update of agreed good practice.   

Out of Scope

Development of UoE-wide information security standards and associated KPIs - this falls under the remit of the CISO/InfoSec team.  

 

Current project status

Report Date RAG Budget Effort Completed Effort to complete
January 2023 AMBER 0.0 days 0.0 days 0.0

Project Info

Project
MVM Information Security Compliance
Code
MVM533
Programme
MVM Business Administration (MVMBUS)
Management Office
ISG PMO
Project Manager
Jonathan Henderson
Project Sponsor
Mark Hay
Current Stage
Initiate
Status
Closed
Project Classification
Grow
Start Date
06-Jun-2022
Planning Date
n/a
Delivery Date
n/a
Close Date
n/a
Overall Priority
Normal
Category
Discretionary

Documentation

Project Dashboard

Project journal

No entries found.

Change dashboard

Nothing to report.