1. Does your organisation use any applications or software to record Record of Processing Activity (ROPA)? If so, please state the product name(s) and version numbers(s) (if known)
Yes, Microsoft Excel 365
2. Does your organisation use any applications or software to support preparation for, or maintenance of ISO 27001 and/or ISO 27701 compliance? If so, please state the product name(s) and version numbers(s) (if known)
No
3. Does your organisation use any applications or software associated with data breach management? If so, please state the product name(s) and version numbers(s) (if known)
Yes, Microsoft Excel 365, SharePoint 365 and Smart Surveys
4. Does your organisation use any applications or software for Policy Management? If so, please state the product name(s) and version numbers(s) (if known).
Yes, Protocol Policy Systems and MetaCompliance
5. Does your organisation use any eLearning for Data Protection and Security Awareness? If so, please state the product name(s) and version numbers(s) (if known)
Yes, MetaCompliance
6. Does your organisation have any plans to explore the market regarding data privacy compliance tools? If so, please describe
The Council’s Data Protection Officer has documented a desire to explore the market with a view to assessing whether a Privacy Management Solution would be of benefit to Devon County Council.
7. Who is responsible for procuring ICT applications that support your organisation’s Information Governance teams? A job-title & directorate will be sufficient.
Job title: Strategic Information Governance Manager and Data Protection Officer
Directorate: Digital and Technology Service