You are here: Home Services & Applications Information Governance (IG) Information Governance Statement of Compliance

Information Governance Statement of Compliance

What is it?

The Information Governance Statement of Compliance (IG SoC) is the process by which organisations enter into an agreement with NHS CFH for access to the NHS National Network (N3). The process includes elements that set out terms and conditions for use of NHS CFH systems and services including the N3, in order to preserve the integrity of those systems and services.

The steps in the IG SoC process set out a range of security related requirements which must be satisfied in order for an organisation to be able to provide assurances in respect of safeguarding the N3 network and information assets that may be accessed.

More information on the IG SoC

Please select your organisation type to follow the IGSoC process

NHS Organisations

  • Acute trusts
  • Ambulance trusts
  • Mental health trusts
  • Primary care trusts
  • Strategic health authorities
  • NHS Business Services Authority
  • NHS Direct
  • NHS managed Communities of Interest (COINs)

Non-NHS Organisations

  • Commercial Third Parties
  • Dentists
  • NHS Business Partners
  • Pharmacies
  • Independent prisons
  • Secondary use organisations
  • Social care
  • Academia
  • Commercial Aggregators
 
 

 

What's New

January 2012

  • LCA updated to version 3.1

The LCA template has been updated to version 3.1 to rectify problems with attaching diagrams to Appendix A.  Version 3.0 or version 3.1 are the only versions that will now be accepted for review - previous versions will be rejected.

The version 3.1 template can be found on the Downloads and Links page.

 

November 2011

  • LCA version 3 now live

A new version of the LCA template is now available and should be used for all new applications or LCA amendments as applicable.  Version 2 will still be accepted until 31/12/11, however after this time any previous version will be rejected and a version 3 submission will be requested.

The new template can be found on the Downloads and Links page.

January 2010

  • Updated Application Form
  • IG Assurance Statement

The IGSoC Application Form has been updated to version 2.0.  This is now available from the Downloads and Links page.

The IG Assurance Statement which has replaced the previous IG Statement of Compliance has now been made available for information from the Downloads and Links page.  This document is for information only and is accepted as part of the IG Toolkit submission.Oct. 2009

  • Website Update

The Website has been updated to reflect the new IGSoC streamlined process.  Please review the relevant sections to ensure that you are following the correct process.  Applications currently pending under the previous process will continue to be progressed in this way, however all new applications should follow the new procedure.

Sept. 2009

  • New Application Form

As part of the streamlining of the IGSoC process a new application form has been launched to be completed by those organisations wanting to complete the IGSoC process for access to NHS Connecting for Health digital systems and services and the N3 national network. This application form includes a sponsorship letter which is applicable to Non -NHS organisations needing sponsorship from an NHS organisation to be able to access the N3 network and NHS Connecting for Health digital systems and services.

  • N3 Implementation Managers' involvement of the IG SoC process

The N3 implementation managers (N3 IMs) will now be included within the application process for the IG SoC. The exeter.helpdesk@nhs.net is the first point of call for all organisations for the IG SoC process whom will then route all Non- NHS organisation applications to the appropriate N3 IM, based on their sponsoring organisation's SHA region.

Benefits of the N3 IM's involvement include having visibility of Non NHS organisations connecting to / using NHS Connecting for Health systems & services via N3 within their SHA region. They will also be in a position to validate the sponsorship part of the application form for legitimacy.

A listing of the N3 IMs and their allocated SHA regions can be found at http://www.n3.nhs.uk/HowdoI/ContactN3.cfm#N3%20NHS%20CFH%20Implementation%20Managers

July 2009

Review of IGSoC process

From July 2009 the IG SoC Process will migrate to a new, streamlined process.  As a result, the IG SoC Process described in these web pages has been withdrawn and applications will be supported through the Exeter Helpdesk (see contact details below).  The Exeter Helpdesk personnel will record the details of your call and provide you with an incident number. Thereafter a member of the 3rd line IGSoC support team will pick up your call and liaise directly with the National NHS Network (N3) Team in order to process your application. 

This process has been reviewed to incorporate feedback received from organisations who have completed the current process, and with a view to extending the process to a wider independent sector and commercial third- party constituency, from the current state which was predominantly aimed at NHS Organisations such Trusts and PCTs. The IG Toolkit and IGSoC process will thus be integrated into a single process that will ultimately lead to a more efficient way to assess and ultimately approve your application. 

Due to the changes to the process, the IGSoC Mailbox and Telephone hot-line will be closed on Friday 3rd July and any e-mails redirected to the Exeter Helpdesk.  All current in-process applications will be processed in the normal way but communication about them should be directed to the Exeter Helpdesk. 

All new applications from July 4th onwards should be directed straight to the Exeter Helpdesk who will refer your call to the IGSoC support team for processing.  

All non-NHS Organisations need a sponsorship form to apply for an N3 connection, and this must accompany the on-line application.  The address of the NHS sponsor will determine the regional N3 Implementation Team who will oversee the IG assurance process.

Contact details:

Email - exeter.helpdesk@nhs.net

Phone - 01392 251289

Note : When contacting the Helpdesk, please ensure that you provide your full contact details, including your name, organisation, address, telephone number and email address.

GPs can now make their IGSoC submission online and the process is very simple

GPs Registered for IM&T DES will already have met some of the requirements of the DES initiative by completing their IGSoC as part of their Information Governance Toolkit (IGT) self-assessment and submission.

  • Step 1: Register for, and complete the IGT: many GPs are already registered for this. Please go to the registration and log-in page.  The editor MUST then enter the name and email address of the practice partner that has responsibility for IG in the 'My Organisation' page of the IGT (the IGSoC signatory box).
  • Step 2: Submit your completed IGT assessment.
  • Step 3: Follow the simple instructions in the IGSoC verification email that is received by your IGSoC signatory.

More Information

Tracking Database functionality for PCTs

To support primary care trusts (PCTs) in managing their obligation for ensuring IG frameworks are in their Local Health Communities (LHCs), we have developed additional functionality in the Tracking Database (TDb).

The benefits to PCTs are two-fold:

  • Firstly in managing IGT submission status, action plan (implementation) plans and IGSoC declarations,
  • Secondly, in automating some procedures to reduce the time required to process paperwork.