Information Governance & DSPT
CareVerity ECM & Care Compliance System with CareVerity Training Academy.
DR
Demo Registered Manager
Registered Manager demo role view
CareVerity > Policies > Information Governance
Information Governance & DSPT
Data protection, DSPT, cyber security, supplier assurance, incident response, backups and business continuity evidence using fake demo records only.
DSPT evidence mode
DSPT status
Standards met
Policies
7
Open IG actions
4
Next review
30 Jun 2027
Information governance policy metadata
| Metadata field | Demo value |
|---|---|
| Version number | v1.0 demo pack |
| Effective date | 01 May 2026 |
| Review date | 01 May 2027 |
| Policy owner | Demo System Owner |
| Approver | Demo Registered Manager |
| DSPT certificate / publication reference | 2025-26 (version 8) / AT18 |
| Supplier / hosting provider details | Demo Cloud Hosting Ltd | UK hosting region | DPA and contract held |
| CareVerity company details if registered separately | CareVerity Ltd placeholder | Company number placeholder | ICO registration placeholder |
Policy pages
Each policy page has versioning, owner, dates, approval, upload, edit, export and audit controls.
Access Control Policy
Version v1.4 | Owner: System Owner
Effective date
01 May 2026
Review date
01 May 2027
Incident Response Policy
Version v1.3 | Owner: Registered Manager
Effective date
01 May 2026
Review date
01 Nov 2026
Staff Data Protection Training Policy
Version v1.2 | Owner: Training Administrator
Effective date
01 May 2026
Review date
01 May 2027
Backup Policy
Version v1.1 | Owner: System Owner
Effective date
01 May 2026
Review date
01 Nov 2026
Business Continuity Plan
Version v2.0 | Owner: Registered Manager
Effective date
01 May 2026
Review date
01 Nov 2026
Cyber Security Arrangements
Version v1.5 | Owner: Compliance / Quality Officer
Effective date
01 May 2026
Review date
01 Nov 2026
Supplier / Hosting Due Diligence Policy
Version v1.0 | Owner: System Owner
Effective date
01 May 2026
Review date
01 May 2027
Evidence trackers
| Evidence tracker | Demo value | Status | Evidence note | Owner |
|---|---|---|---|---|
| DSPT certificate / publication reference | 2025-26 (version 8) / AT18 | Standards met | Published 31 Dec 2025; valid to 30 Jun 2027 | Demo Registered Manager |
| Staff data protection training records | 28/31 completed | 3 due | Training matrix and staff file evidence | Demo Training Admin |
| Access review log | Monthly role review | Complete | Coordinator/Admin/HR access Mon-Fri 08:00-17:00 | Demo System Owner |
| Breach / incident log | 2 demo records | One open action | ICO decision recorded | Demo Compliance Officer |
| Backup test log | Latest restore test passed | Next due 30 Jun 2026 | Restore evidence retained | Demo System Owner |
| Business continuity test log | Office outage scenario | Action plan open | Manual visit log tested | Demo Registered Manager |
| Supplier due diligence register | 8 suppliers reviewed | 1 action due | DPA/contract/insurance status tracked | Demo Senior Administrator |
| Cyber security action plan | 12 actions | 9 complete | MFA, device security, patching and training | Demo Compliance Officer |
| MFA rollout checklist | Office users complete | Mobile users in progress | Manager exceptions audited | Demo System Owner |
| Device security checklist | Encrypted managed devices | 2 BYOD reviews due | Lost device process tested | Demo IT Lead |
Supplier due diligence form
Demo form template with role-based access and audit-ready fields.
Staff data protection training record
Demo form template with role-based access and audit-ready fields.
Data breach incident record
Demo form template with role-based access and audit-ready fields.
Backup test record
Demo form template with role-based access and audit-ready fields.
Business continuity test record
Demo form template with role-based access and audit-ready fields.
Access review record
Demo form template with role-based access and audit-ready fields.
Cyber security action plan and MFA rollout checklist
| Action | Status | Evidence | Owner | Risk |
|---|---|---|---|---|
| MFA for office users | Complete | All admin roles require MFA | Demo System Owner | Green |
| MFA for mobile users | In progress | Care worker rollout staged by branch | Demo Training Admin | Amber |
| Device encryption | Complete | Managed devices encrypted; BYOD checklist held | Demo IT Lead | Green |
| Patch management | In progress | Monthly review evidence uploaded | Demo System Owner | Amber |
| Phishing awareness | Due soon | Annual refresher assigned | Demo Training Admin | Amber |
| Incident response drill | Complete | Breach workflow tested | Demo Compliance Officer | Green |
Device security checklist
| Device security item | Status | Evidence note |
|---|---|---|
| Screen lock enabled | Complete | Office laptops and mobile app devices |
| Encryption enabled | Complete | Managed devices |
| Lost device reporting | Complete | Report immediately to office/manager |
| Personal phone storage blocked | Complete | Photo evidence uploads to secure app storage only |
| Remote wipe placeholder | In progress | MDM integration future enhancement |
| Device access audit | Complete | Login and restricted document views logged |
Information governance permissions
| Role | Permission | Scope |
|---|---|---|
| System Owner | Full access | Policy, evidence, supplier, incident, backup, continuity and access review records |
| Registered Manager | Full access | Approval, sign-off, report exports and incident review |
| Compliance / Quality Officer | View/add/edit governance records | Policies, incidents, evidence trackers and action plans |
| HR Administrator | Staff training records only | Training evidence, certificates and staff acknowledgements |
| Care Coordinator | View relevant procedures; report incidents | Access policy, incident procedure and incident reporting form |
| Care Worker | Training/policy acknowledgement only | Own training evidence and policy acknowledgement |
| Auditor / Inspector | Read-only evidence access | Time-limited evidence view where authorised |
Information governance audit log
| Audit action | Record | User | Date/time | Audit note |
|---|---|---|---|---|
| Policy viewed | Access Control Policy | Demo Care Coordinator | 15 May 2026 09:15 | Relevant procedures only |
| Policy edited | Incident Response Policy | Demo Compliance Officer | 15 May 2026 09:30 | Manager review requested |
| Policy approved | Backup Policy | Demo Registered Manager | 15 May 2026 10:00 | v1.1 approved |
| Signed policy uploaded | Business Continuity Plan | Demo Senior Administrator | 15 May 2026 10:10 | Signed PDF placeholder |
| Supplier approved | Demo Cloud Hosting Ltd | Demo System Owner | 15 May 2026 10:20 | DPA and contract checked |
| Incident logged | IG-DEMO-INC-001 | Demo Care Coordinator | 15 May 2026 10:30 | Manager sign-off required |
| Backup test recorded | BACKUP-DEMO-001 | Demo System Owner | 15 May 2026 10:45 | Restore successful |
| Business continuity test recorded | BCP-DEMO-001 | Demo Registered Manager | 15 May 2026 11:00 | Action plan opened |
| Staff training completed | Demo Care Worker A | Demo Training Admin | 15 May 2026 11:20 | Certificate uploaded |
| Access review completed | ACCESS-DEMO-001 | Demo System Owner | 15 May 2026 11:40 | Next review scheduled |