1. Are the Data Centre's operated by or for the organisation fit for purpose? For example, is there a Business Continuity Plan, is there Disaster Recovery in place or is it a single site?
A) Yes, we have business continuity including storage across different locations
2. Is there any capital investment in data centres planned in the next 36 months? For example, Mechanical & Electrical or refresh of equipment within the DC such as network, storage area network?
A) Yes, we have a 5 year investment plan for IM&T
3. Is data privacy and or information security compliance a priority for the organisation’s board?
A) Yes
4. On your Organisation’s risk register, are there any Information Technology related risks?
- If time/ cost allows, please list the top three related risks.
A) Majority of risks related to the lack of a Trust wide EPR
5. Are the cyber security vulnerabilities within the organisation’s existing Information Technology estate increasing?
- Has the organisation had a security breach in the past 12 months?
A) We are constantly improving our security and have had no security breaches
6. Did the organisation meet its Information Technology savings target in the last Financial Year?
A) Yes the IM&T Division was within budget
7. What percentage of Information Technology budget is currently allocated to “on-premises” capability vs “cloud” capability?
A) We have a mixed economy and it would be very difficult to separate the budget.
8. Does the organisation have the skills and resource levels necessary for moving to the cloud?
A) We continually invest in our staff training to keep them skilled up with new technology
9. Do you have an EPR in place? – If so which one? If not do you have a timescale of which you have to implement it?
A) No – Planned within the next two years.
10. In relation to contracts with Amazon Web Services, Microsoft for Azure and/or Google for Google Cloud, was the monthly expenditure higher than budgeted?
- If yes, has the organisation been able to subsequently reduce the cost whilst maintaining service levels for users?
A) No, within budget
