For Decision

Paper 1 24 March 2023 Page 1 of 2

Title: Intern­al Audit Report ²⁰²²⁄₂₃ Data Management

Report sub­mit­ted by: Ash­ley Bick­er­staff, Man­ager Tech­no­logy Risk, Azets

Pur­pose

This paper presents the review of the Cairngorms Nation­al Park Author­ity approaches and con­trols in place for our Data Man­age­ment. The review has been under­taken as part of the agreed Intern­al Audit Plan for ²⁰²²⁄₂₃.

1. Recom­mend­a­tions

The Audit and Risk Com­mit­tee is asked to:

a) Con­sider the intern­al aud­it­ors report and find­ings; b) Endorse the man­age­ment responses to recom­mend­a­tions for future action and sys­tem improvements.

Exec­ut­ive Summary

1. Azets have com­pleted their intern­al audit review of the Cairngorms NPA’s approach to data man­age­ment, includ­ing our ongo­ing work to migrate our data and records plat­form from an on-serv­er to a Share­Point cloud solution.

2. While only two recom­mend­a­tions for action have been high­lighted, both recom­mend­a­tions are of a sig­ni­fic­ant, ​“amber”, risk rat­ing. Both recom­mend­a­tions are accep­ted by man­age­ment and man­age­ment responses provided in the attached report. These recom­mend­a­tions are very help­ful to us in our evolving approach to migra­tion to cloud-based data and records man­age­ment and use of Share­Point as part of our switch to a cloud-based IT platform.

3. As back­ground inform­a­tion, the Park Author­ity is cur­rently recruit­ing an Inform­a­tion Man­ager role. This post will be respons­ible for tak­ing this area of work for­ward, fol­low­ing staff turnover and adjust­ment to the role and respons­ib­il­it­ies of the vacant post now being recruited.

Page 2 of 2

Catri­ona Strang 16 March 2023