Senior Information Risk Owner Training

The SIRO has to:

• take ownership of the organisations' information risk policy
• acts as advocate for information risk
• and should provide written advice to to the accounting counting officer

In addition, The Thomas Walport Review and the Poynter Report have all identified the management of personal information security as a matter of high priority.

A key area, which perhaps needs further emphasis, is ensuring that all employees are aware of their responsibilities and the policies of the organisation. Additionally ownership of, and accountability for, information needs to be established throughout the organisation.

How the SIRO role develops and how the responsibilities are co-ordinated with the work of the other information governance professionals are important considerations. Trust Boards will wish to ensure that there is no duplication of effort and to monitor the effectiveness of this role.