Provision of Information Asset Management Trial Proof of Concept

The Army SIRO and Principal Data Protection Advisor (PDPA) own the risk of the processing of Personal Identifiable Information (PII) that is processed within the Army TLB, ensuring compliance to the Data Protection Act 2018 (DPA18) and UK General Data Protection Regulation (UK GDPR), and providing evidence of compliance when required by the MOD DPO or Information Commissioner's Office (ICO). This is currently being managed using an Excel Spreadsheet (Data Protection Impact Assessment (DPIA), asset database (Army Information Asset Register (AIAR) and a PowerBi Dashboard.

Since 2008 there has been minimal work on the AIAR other than patch and software updates. There is currently no way to exploit the information within the AIAR, meaning that we are unable to assess our compliance rate and understand our data flows and security risks and mitigations.

Contracting expertise to configure the existing software to meet this use case is required. As part of the trial assessments of ease of use and applicability will be reviewed for suitability. Along with level of skills required to change, amend and build that is required to inform any training required.