Embedding Information Risk into Governance and Culture
Make the Safe Route the Easy Route
Our Embedding Information Risk into Governance and Culture workshop helps senior leaders move information risk beyond compliance and into the way their organisation governs, decides and behaves every day.
Designed for NHS Trusts, Integrated Care Boards, local authorities, care providers and hospices, the workshop uses a realistic cross-partner case study to show how information risk is owned, reported and managed across organisational boundaries.
Delegates leave with practical outputs they can use straight away: a board-ready risk entry, a draft one-page board update and two culture interventions they can start within 10 working days.
Practical. Decision-Ready. Collaborative.
Course Type
Virtual
Duration
2.5 Hours
Course Overview
Information risk only protects people and services when it shapes the decisions boards make and the behaviours staff show every day.
This interactive leadership workshop is designed for SIROs, deputy SIROs and senior leaders who want information risk to be something their organisation actively uses to govern well and build trust, not something it does to comply.
Working through an anonymised scenario involving an NHS Trust, a local authority, community services and a hospice, delegates will translate operational information governance issues into clear board-level risks, test their risk register against a quality checklist, design decision-focused board reporting and plan practical steps to reduce workarounds and improve near-miss learning.
The session combines short expert input with breakout groups, paired discussion and hands-on templates. It runs under the Chatham House Rule, so delegates can share real challenges openly and in confidence.
What You'll Learn
-
The SIRO's strategic role in embedding information risk into governance and culture
-
How to translate operational IG issues into board-relevant risks with clear controls, owners and assurance
-
How to use and challenge the information risk register as a leadership tool for prioritisation, escalation and tracking
-
Who does what across the SIRO, Caldicott Guardian, DPO, Information Asset Owners, IG Leads and Cyber teams
-
How the IG Framework provides the operating model that makes information risk management work
-
How to design board reporting that leads with the decisions required, risk trends and assurance
-
How to choose assurance indicators that show whether controls are actually working
-
How to plan culture interventions that reduce workarounds and encourage near-miss reporting
Who Should Attend?
This programme is ideal for:
-
Senior Information Risk Owners (SIROs) and Deputy SIROs
-
Board-level sponsors and Non-Executive Directors
-
Executive and Senior Leaders
-
Caldicott Guardians and Data Protection Officers
-
Information Governance Leads and Information Asset Owners
-
Senior managers in NHS Trusts, ICBs, local authorities, care providers and hospices
Key Benefits
✔ Leave with a board-ready information risk entry
✔ Take away a draft one-page board update built on a decision-first template
✔ Clarify ownership and decision routes across partner organisations
✔ Strengthen assurance with measurable leading and lagging indicators
✔ Start two practical culture interventions within 10 working days
✔ Receive a toolkit of seven practical handouts, including a risk quality checklist,
assurance indicator menu and near-miss rapid review template
Practical. Decision-Ready. Collaborative.
Join senior leaders from across health and social care who are turning information risk into confident decisions, stronger partnerships and a culture where the safe route is the easy route.