Knowledge Base

This page allows you to browse the IG Toolkit Knowledge Base. All the resources listed on this page are also referenced in the 'Knowledge Base Resources' section of the relevant individual requirements.

To search for specific resources, enter search criteria below and click 'Search'.

To view all resources, leave the search criteria blank.


(only shows results where all keywords match)

TitleTypeDetailsCreation DateLast Review DateRequirement(s)
NHS England Emergency Preparedness, Resilience and Response (EPRR) BC toolkit External web site link Key Resources View 01-2014 01-2015 319
PAS 2015 - Framework for Health Services Resilience External web site link Key Resources View 01-2014 01-2015 319
Audit Programme - Mobile and Remote Working
(DOC, 67 KB)
Exemplar Materials View 07-2007 01-2015 314
Bite-sized Good Practice Guide: Business Continuity
(DOC, 287 KB)
Exemplar Materials View 05-2009 01-2015 319
Bite-sized Good Practice Guide: Internet and Email
(DOC, 393 KB)
Exemplar Materials View 05-2009 01-2015 211, 305
Bite-sized Good Practice Guide: Media Disposal
(DOC, 313 KB)
Exemplar Materials View 05-2009 01-2015 316
Bite-sized Good Practice Guide: Mobile Computing
(DOC, 337 KB)
Exemplar Materials View 05-2009 01-2015 314
Bite-sized Good Practice Guide: Safe Computing
(DOC, 347 KB)
Exemplar Materials View 05-2009 01-2015 211, 305
British Medical Association: Confidentiality and Disclosure of Health Information Tool Kit External web site link Key Resources View 01-2015 01-2015 211
BS ISO/IEC 20000-2:2012 Information technology. Service management. Guidance on the application of service management systems External web site link Key Resources View 12-2005 01-2015 210, 323
BS ISO/IEC 27000 Series of Information Security Standards External web site link Key Resources View 07-2007 01-2015 210, 305, 313, 314, 316, 323
Business Continuity Manual 2003
(PDF, 348 KB)
Key Resources View 05-2003 01-2016 319
Business Link: Employees working from home External web site link Useful Web Sites View 08-2003 01-2015 314
Cabinet Office: Best Management Practice Portfolio External web site link Useful Web Sites View Unknown 01-2015 210, 323
Care Quality Commission: Regulations for service providers and managers External web site link Key Resources View 01-2015 01-2015 206, 211
Cheshire: Adapted Risk Assessment Form for General Practice
(DOC, 260 KB)
Exemplar Materials View 05-2007 01-2015 317, 319
Cheshire: Handling Security Incidents Affecting Patients Confidentiality
(DOC, 66 KB)
Exemplar Materials View 05-2007 01-2015 320
College of Optometrists: Guidance for Professional Practice External web site link Key Resources View 01-2015 01-2015 115, 116, 317, 319, 320
Confidentiality Advisory Group (CAG) of the Health Research Authority website External web site link Useful Web Sites View Unknown 01-2015 202
Corporate Information Security Policy Template
(DOC, 98 KB)
Exemplar Materials View 10-2007 01-2015 305
Cyber Essentials External web site link Useful Web Sites View 02-2015 02-2015 313
Data Protection Act 1998 External web site link Key Resources View 07-1998 01-2016 116, 209, 210
David Nicholson and ICO letter 2011
(PDF, 51 KB)
Key Resources View 01-2014 01-2015 117
David Nicholson Communications External web site link Key Resources View Unknown 01-2015 314
Dental practice template: Business Impact Analysis Sheet
(XLS, 31 KB)
Exemplar Materials View 12-2009 01-2015 319
Dental practice template: Confidentiality Agreement for Staff
(DOC, 26 KB)
Exemplar Materials View 12-2009 01-2015 116
Dental practice template: Emergency and Business Continuity Plan
(DOC, 172 KB)
Exemplar Materials View 12-2009 01-2015 319
Dental practice template: IG Work Plan
(XLS, 110 KB)
Exemplar Materials View 12-2009 01-2015 114
Dental practice template: Incident Management Procedures
(DOC, 67 KB)
Exemplar Materials View 12-2009 01-2015 320
Dental practice template: Incident Register
(DOC, 47 KB)
Exemplar Materials View 12-2009 01-2015 320
Dental practice template: Incident Reporting Form
(DOC, 36 KB)
Exemplar Materials View 12-2009 01-2015 317, 320
Dental practice template: Information Asset Register
(DOC, 78 KB)
Exemplar Materials View 12-2009 01-2015 316
Dental practice template: Information Governance Policy
(DOC, 51 KB)
Exemplar Materials View 12-2009 01-2015 115
Dental practice template: Physical Security Risk Assessment and Action Plan
(XLS, 45 KB)
Exemplar Materials View 12-2009 01-2015 317
Dental practice template: Staff Declaration Form
(DOC, 57 KB)
Exemplar Materials View 12-2009 01-2015 115
DH: Confidentiality NHS Code of Practice 2003 External web site link Key Resources View 11-2003 02-2016 115, 116, 117, 202, 210, 211
DH: Confidentiality NHS Code of Practice: Supplementary Guidance - Public Interest Disclosures 2010 External web site link Key Resources View Unknown 01-2015 202
DH: Example Confidentiality Clauses
(DOC, 25 KB)
Exemplar Materials View 01-2008 01-2015 116
DH: Good Practice Guidelines - Destruction of Data and Media Containing Sensitive Data
(PDF, 74 KB)
Key Resources View 11-2007 01-2015 319
DH: Information Security NHS Code of Practice 2007 External web site link Key Resources View 04-2007 01-2016 115, 210, 305, 313, 314, 316, 317, 319, 320, 323
DH: Job Description - General Practice IG Lead
(DOC, 88 KB)
Exemplar Materials View Unknown 01-2015 114
DH: NHS IG - Blogging and Social Networking 2009
(PDF, 53 KB)
Key Resources View 12-2009 01-2015 305
DH: NHS IG - Email Policy
(DOC, 111 KB)
Exemplar Materials View 01-2007 01-2015 305
DH: NHS IG - Example Forensic Readiness Policy External web site link Exemplar Materials View 02-2015 02-2016 305
DH: NHS IG - Good Practice Guide for the Transfer of Batched Person Identifiable Data External web site link Key Resources View 01-2007 01-2015 211, 314
DH: NHS IG - Guidance for the Classification Marking of NHS Information 2009
(PDF, 115 KB)
Key Resources View 01-2009 01-2015 323
DH: NHS IG - Guidelines on Use of Encryption to Protect Person Identifiable and Sensitive Information 2008 External web site link Key Resources View 01-2008 01-2015 211
DH: NHS IG - Home Working Policy and Procedural Template 2008
(DOC, 44 KB)
Exemplar Materials View 01-2009 01-2015 314
DH: NHS IG - IG Checklist for Staff Movers and Leavers 2008
(DOC, 44 KB)
Exemplar Materials View 01-2009 01-2015 305
DH: NHS IG - Information Risk Management - Good Practice Guide 2009 External web site link Key Resources View 01-2009 01-2015 210, 305, 313, 316, 317, 319, 320, 323
DH: NHS IG - Internet Use Policy
(DOC, 82 KB)
Exemplar Materials View 01-2007 01-2015 305, 313
DH: NHS IG - ISMS Risk Assessment Template 2008
(DOC, 43 KB)
Exemplar Materials View 01-2007 01-2015 319
DH: NHS IG - Laptop Security Policy 2008
(DOC, 66 KB)
Exemplar Materials View 01-2007 01-2015 314
DH: NHS IG - Network Security Policy 2003
(DOC, 90 KB)
Exemplar Materials View 01-2007 01-2015 313
DH: NHS IG - Remote Access Policy 2003
(DOC, 74 KB)
Exemplar Materials View 01-2007 01-2015 314
DH: NHS IG - Short Message Service & Texting
(PDF, 48 KB)
Key Resources View 01-2010 01-2015 211
DH: NHS IG - Staff Declaration Form
(DOC, 59 KB)
Exemplar Materials View 04-2010 01-2015 115
DH: NHS IG - User Guide to Passwords
(DOC, 36 KB)
Exemplar Materials View 09-2003 01-2015 305
DH: Prison Health Induction Framework
(PDF, 90 KB)
Key Resources View 11-2003 01-2015 117
DH: Records Management NHS Code of Practice 2008 External web site link Key Resources View Unknown 01-2016 115, 210
DH: The Caldicott Guardian Manual 2010 External web site link Key Resources View 03-2010 02-2016 202
DH_NHS IG - Fax Printer Ribbons and Cartridges Guidance
(PDF, 49 KB)
Key Resources View 02-2011 01-2015 305
Directgov: Employment Contracts External web site link Key Resources View Unknown 01-2015 116
DSCN 18/2009 Patient Safety Risk Management System - Deployment and Use of Health Software External web site link Key Resources View 04-2012 01-2015 210
East Surrey: Confidentiality Clause for Staff Contracts 2002
(DOC, 35 KB)
Exemplar Materials View 04-2007 01-2015 116
East Surrey: Incident Reporting Policy 2002
(DOC, 66 KB)
Exemplar Materials View 05-2007 01-2015 320
European Commission: International Transfers Home Page External web site link Useful Web Sites View 01-2015 01-2015 209
General Dental Council: Standards for the Dental Team External web site link Key Resources View 02-2015 02-2015 115, 116, 319, 320
General Medical Council: Confidentiality 2009 External web site link Key Resources View 10-2009 01-2015 115, 116, 117, 211
General Medical Council: Good Medical Practice 2013 External web site link Key Resources View 11-2006 01-2015 117, 319
General Optical Council: Code of Conduct for Business Registrants External web site link Key Resources View 01-2015 01-2015 115, 116
General Optical Council: Code of Conduct for optometrists, dispensing opticians and optical students External web site link Key Resources View 01-2015 01-2015 115
General Pharmaceutical Council: Conduct, Ethics and Performance External web site link Key Resources View 08-2007 01-2015 115, 116, 317, 319, 320
General Practice template: Staff Declaration Form.doc
(DOC, 57 KB)
Exemplar Materials View 05-2010 01-2015 211
Government Response to Report of the Caldicott2 Review
(PDF, 757 KB)
Key Resources View 01-2014 01-2015 115, 202, 206
GP Information Governance policy
(DOC, 32 KB)
Exemplar Materials View 05-2007 01-2015 115
HM Government: Information Sharing Guidance
(PDF, 1111 KB)
Key Resources View 10-2008 01-2015 211
HM Prison Service Standards Manual: Standard 37 - Personal Information
(PDF, 102 KB)
Key Resources View 05-2006 01-2015 202
HMG: Cyber Essentials Scheme External web site link Useful Web Sites View 02-2015 02-2015 313
HSCIC - IG Lead Job Description and Person Specification
(DOCX, 120 KB)
Exemplar Materials View 01-2014 01-2015 114
HSCIC IG Resource Pack External web site link Exemplar Materials View 09-2008 01-2015 116, 211, 316, 317, 319, 320
HSCIC Trust Information Governance Policy
(DOC, 42 KB)
Exemplar Materials View 01-2005 01-2016 115
HSCIC: A guide to confidentiality in health and social care: references - September 2013
(PDF, 698 KB)
Key Resources View 01-2014 01-2015 115
HSCIC: A guide to confidentiality in health and social care: Treating confidential information with respect - September 2013
(PDF, 1491 KB)
Key Resources View 01-2014 01-2015 115
HSCIC: AQP Template - Access Control Procedures
(DOC, 66 KB)
Exemplar Materials View 04-2012 01-2015 305
HSCIC: AQP Template - Assignment of Mobile Computing Equipment Form
(DOC, 37 KB)
Exemplar Materials View 04-2012 01-2015 314
HSCIC: AQP Template - Compliance Monitoring Form
(DOC, 50 KB)
Exemplar Materials View 04-2012 01-2015 305
HSCIC: AQP Template - Information Asset Register
(DOC, 78 KB)
Exemplar Materials View 04-2012 01-2015 323
HSCIC: AQP Template - Mobile Computing Equipment Asset Log
(DOC, 44 KB)
Exemplar Materials View 04-2012 01-2015 314
HSCIC: AQP Template - Staff Guidelines on Using Mobile Computing Equipment
(DOC, 46 KB)
Exemplar Materials View 04-2012 01-2015 314
HSCIC: Checklist Guidance for Reporting, Managing and Investigating Information Governance and Cyber Security Serious Incidents Requiring Investigation
(PDF, 442 KB)
Key Resources View 05-2015 05-2015 206, 319, 320
HSCIC: E and T Standard 3 - Learning Needs Analysis External web site link Useful Web Sites View Unknown 01-2015 117
HSCIC: Good Practice Guidelines - Application Security External web site link Key Resources View 03-2006 01-2015 210, 211, 305, 323
HSCIC: Good Practice Guidelines - Disposal and Destruction of Sensitive Data External web site link Key Resources View 03-2006 01-2015 323
HSCIC: Good Practice Guidelines - Securing Web Infrastructure and Supporting Services External web site link Key Resources View 02-2010 01-2015 323
HSCIC: Good Practice Guidelines - Web Server Security
(PDF, 32 KB)
Key Resources View 04-2010 01-2015 323
HSCIC: Good Practice Guidelines in Information Governance - Information Security External web site link Key Resources View Unknown 01-2015 114, 210, 305, 313, 319
HSCIC: Information Governance Toolkit Incident Reporting Tool Publication Statement
(PDF, 62 KB)
Key Resources View 06-2013 01-2015 320
HSCIC: Information Governance Web Pages External web site link Useful Web Sites View Unknown 01-2015 114, 115, 209
HSCIC: Safe Haven Briefing: Secure transfer of personal identifiable information by fax
(PDF, 154 KB)
Key Resources View 01-2014 01-2015 211
HSCIC: Safe Haven Directory External web site link Useful Web Sites View Unknown 01-2016 211
HSCIC: Sending an encrypted email from NHSmail to a non-secure email address
(PDF, 364 KB)
Key Resources View 02-2015 02-2016 211
HSCIC: Summary Care Record - Information Governance guidance for Privacy Officers and Caldicott Guardians External web site link Key Resources View 01-2015 01-2015 206
HSCIC: What You Should Know About Information Governance Booklet External web site link Key Resources View 01-2015 01-2015 114
Information Commissioner: Assessing Adequacy - International Data Transfers External web site link Key Resources View Unknown 01-2015 209
Information Commissioner: Contact Details External web site link Useful Web Sites View Unknown 01-2016 209
Information Commissioner: Data Sharing Code of Practice External web site link Key Resources View 01-2015 01-2015 115
Information Commissioner: Guidance Index External web site link Useful Web Sites View Unknown 01-2016 209
Information Commissioner: Health Sector specific guides provided by the ICO External web site link Key Resources View 05-2002 02-2016 202
Information Commissioner: Home Page External web site link Useful Web Sites View Unknown 01-2015 116
Information Commissioner: Model Contract Clauses - International Transfers of Personal Data External web site link Key Resources View Unknown 01-2015 209
Information Commissioner: Outsourcing - A Guide for Small and Medium Sized Businesses External web site link Key Resources View 04-2009 01-2015 116
Information Commissioner: Privacy Impact Assessment Code of Practice
(PDF, 532 KB)
Key Resources View 01-2014 01-2015 115, 210
Information Commissioner: The Eighth Data Protection Principle and International Data Transfers External web site link Key Resources View Unknown 01-2016 209
Information Commissioner: The Employment Practices Code
(PDF, 449 KB)
Key Resources View 11-2011 01-2015 206
Information Commissioner: Training checklist for small and medium sized organisations
(PDF, 34 KB)
Key Resources View 04-2012 01-2015 117
Information Mapping Tool Guidance External web site link Key Resources View 01-2007 01-2015 211
Information Security Forum: Security Staff Remote Access - Implementation Guide
(PDF, 4424 KB)
Exemplar Materials View 10-1999 01-2015 305
Information Security Forum: Security Staff Remote Access - Risks and Controls
(PDF, 3072 KB)
Exemplar Materials View 09-1999 01-2015 305
ISO/IEC 27035:2011 ‘Information technology – Security techniques – Information security risk management’ External web site link Useful Web Sites View 01-2014 01-2015 320
IT Operations: Document Operating Procedures
(RTF, 223 KB)
Exemplar Materials View 05-2007 01-2015 313
IT Operations: Enforced Path Policy
(PDF, 34 KB)
Exemplar Materials View 08-2006 01-2015 305
IT Operations: Monitoring Systems Access & Use
(PDF, 261 KB)
Exemplar Materials View 08-2006 01-2015 305
IT Operations: Operational Change Control
(PDF, 92 KB)
Exemplar Materials View 08-2006 01-2015 210
IT Operations: Review of User Privileges
(RTF, 328 KB)
Exemplar Materials View 09-2003 01-2015 305, 314
IT Operations: User Access Management Policies
(PDF, 33 KB)
Exemplar Materials View 04-2007 01-2015 305, 313, 314
ITIL: The IT Infrastructure Library External web site link Useful Web Sites View Unknown 01-2015 210, 320, 323
Joint IT Committee: The Good Practice Guidelines for GP electronic patient records Version 4 (2011)
(PDF, 1732 KB)
Key Resources View 03-2011 01-2015 116, 117, 211, 319, 320
Mapping between the requirements of ISO/IEC 27001:2005 and ISO/IEC 27001:2013
(PDF, 373 KB)
Key Resources View 01-2014 01-2015 305, 313, 314, 316, 317, 319, 320, 323
Mid Essex Hospital: Photo Request card
(PDF, 383 KB)
Exemplar Materials View 03-2010 01-2015 202
Moving from ISO/IEC 27001:2005 to ISO/IEC 27001:2013
(PDF, 497 KB)
Key Resources View 01-2014 01-2015 305, 313, 314, 316, 317, 319, 320, 323
National Information Board (NIB) and DH: Personalised Health and Care 2020 External web site link Key Resources View 01-2015 01-2015 115, 206
National Pharmacy Association: Home Page External web site link Useful Web Sites View Unknown 01-2015 116
NHS Constitution for England External web site link Key Resources View 01-2015 01-2015 202, 206, 211
NHS Employers: Identity Check Standards External web site link Key Resources View Unknown 01-2015 116
NHS Employment Check Standards External web site link Key Resources View Unknown 01-2016 116
NHS England: Everyone Counts: Planning for Patients 2014/15 - 2018/19 External web site link Key Resources View 02-2015 02-2015 115
NHS England: NHS Standard Contract External web site link Key Resources View 02-2015 02-2015 115
NHS Operating Framework - Informatics Planning 2010/11 External web site link Key Resources View 01-2015 01-2015 115
NHS Terms and Conditions for Procuring Goods and Services External web site link Key Resources View 01-2015 01-2015 116
NHSmail - Public-Facing Site External web site link Useful Web Sites View Unknown 01-2015 211
Nottingham: Information Security - Hardware & Software Guidelines
(PDF, 196 KB)
Exemplar Materials View 07-2006 01-2015 305
Nottingham: Information Security and Password Guidelines
(PDF, 167 KB)
Exemplar Materials View 07-2006 01-2015 305
Pharmaceutical Services Negotiating Committee: IG Web Pages External web site link Useful Web Sites View Unknown 01-2015 114, 115, 116, 117, 316, 319, 320
Pharmacy template: IG Workplan
(DOC, 40 KB)
Exemplar Materials View 12-2009 01-2015 114
Pharmacy template: Information Asset Register (Excel version)
(XLS, 79 KB)
Exemplar Materials View 12-2009 01-2015 316
Pharmacy template: Information Asset Register (Word version)
(DOC, 51 KB)
Exemplar Materials View 12-2009 01-2015 316
Pharmacy template: Information Governance Policy
(DOC, 41 KB)
Exemplar Materials View 12-2009 01-2015 115
Pharmacy template: Information Security Incident Management Procedure
(DOC, 48 KB)
Exemplar Materials View 12-2009 01-2015 320
Pharmacy template: Information Security Incident Report Form
(DOC, 44 KB)
Exemplar Materials View 12-2009 01-2015 320
Pharmacy template: Physical Security Risk Assessment Form
(DOC, 87 KB)
Exemplar Materials View 12-2009 01-2015 317
Pharmacy template: Staff Confidentiality Agreement
(DOC, 25 KB)
Exemplar Materials View 12-2009 01-2015 116
Pharmacy template: Staff Signature List
(DOC, 45 KB)
Exemplar Materials View 12-2009 01-2015 115, 320
Pharmacy template: Staff Signature List (Separate Lists)
(DOC, 213 KB)
Exemplar Materials View 12-2009 01-2015 320
Primary Care External web site link Useful Web Sites View Unknown 01-2016 115
Report of the Caldicott2 Review - Information: To share or not to share? The Information Governance Review
(PDF, 776 KB)
Key Resources View 01-2014 01-2015 115, 202, 206
Standard General Medical Services Contract External web site link Key Resources View 01-2015 01-2015 114
Surrey HIS: Data Protection Leaflet - Best Practice Guidelines
(PDF, 272 KB)
Exemplar Materials View 04-2006 01-2016 211
Surrey: Information Security and Confidentiality Guide for General Practice
(DOC, 1366 KB)
Exemplar Materials View 10-2002 01-2015 317
System Level Security Policy (SLSP)
(DOC, 47 KB)
Exemplar Materials View 12-2008 01-2015 305, 313
The Independent Information Governance Oversight Panel: Annual Report External web site link Key Resources View 01-2015 01-2015 202, 206
The National Health Service (General Ophthalmic Services Contracts) Regulations 2008 External web site link Key Resources View 04-2008 01-2015 114
The National Health Service (Pharmaceutical and Local Pharmaceutical Services) Regulations 2013 External web site link Key Resources View 01-2015 01-2015 114
The National Health Service (Primary Dental Services) (Miscellaneous Amendments and Transitional Provisions) Regulations 2013 External web site link Key Resources View Unknown 01-2015 114
The NHS Care Record Guarantee for England External web site link Key Resources View 07-2009 02-2016 116, 202, 206, 211
Voluntary Sector Template: YPAS Confidentiality Agreement - 3rd Party Suppliers
(DOC, 118 KB)
Exemplar Materials View 04-2012 01-2015 116
Voluntary Sector Template: YPAS Confidentiality Policy
(DOC, 192 KB)
Exemplar Materials View 04-2012 01-2015 116
Voluntary Sector Template: YPAS Disciplinary Policy
(DOC, 186 KB)
Exemplar Materials View 04-2012 01-2015 116
Voluntary Sector Template: YPAS Health and Safety Checklist
(DOCX, 45 KB)
Exemplar Materials View Unknown 01-2015 317
Voluntary Sector Template: YPAS Health and Safety Register
(DOC, 71 KB)
Exemplar Materials View Unknown 01-2015 317
Voluntary Sector Template: YPAS Line Management Supervision Policy
(DOC, 187 KB)
Exemplar Materials View 04-2012 01-2015 115
Voluntary Sector Template: YPAS Risk Assessment Form
(DOC, 52 KB)
Exemplar Materials View Unknown 01-2015 317
Voluntary Sector Template: YPAS Staff Confidentiality Agreement
(DOC, 57 KB)
Exemplar Materials View 04-2012 01-2015 116
Walton Centre: Access and Authentication Standard (Network)
(PDF, 140 KB)
Exemplar Materials View 03-2005 01-2015 305
Walton Centre: Access Authentication Standard (Physical)
(PDF, 92 KB)
Exemplar Materials View 03-2005 01-2015 317
Walton Centre: Asset Management Standard
(PDF, 128 KB)
Exemplar Materials View 03-2005 01-2015 316
Walton Centre: Change Control Standard
(PDF, 141 KB)
Exemplar Materials View 03-2005 01-2015 210, 323
Walton Centre: Communications Standard
(PDF, 120 KB)
Exemplar Materials View 03-2005 01-2015 313, 314
Walton Centre: Full Information Security Management System
(DOC, 35 KB)
Exemplar Materials View 03-2005 01-2015 305, 313, 314, 323
Walton Centre: Incident Reporting Standard
(PDF, 182 KB)
Exemplar Materials View 03-2005 01-2015 320
Walton Centre: Incident Response Standard (Legal and Forensics)
(PDF, 192 KB)
Exemplar Materials View 03-2005 01-2015 320
Walton Centre: Monitoring & Audit Standard
(PDF, 239 KB)
Exemplar Materials View 03-2005 01-2015 305
Walton Centre: Remote Working Standard
(PDF, 121 KB)
Exemplar Materials View 03-2005 01-2015 314

Page Processing Time: 0.13 seconds
Page Render Time:  seconds
Supported By: SOCITM society logo SOCITM Local CIO Council logo Directors of adult social services logo