Course Description

The role of the Senior Information Risk Owner (SIRO) is a key function and needs to be in place across all areas of the public sector, including but not limited to; Government, Healthcare, Nuclear, Education, and suppliers to these organisations.

This is a very senior role within an organisation and is normally an additional set of responsibilities for a director or similar level. As such, SIROs may need additional support in understanding the role and its responsibilities. Developing a deep and wide understanding of Information Assurance in this way helps the organisation build resilience and support effective and valuable information sharing. 

The management of risk within the Public Sector, and increasingly its supply chain, is key to ensuring the security of information assets and making informed decisions to prevent or respond in the event of an incident or breach. 

Who Should Attend

This 1-day course is designed for SIROs and senior management within organisations who have accountability for risk and need a more developed understanding of their role and responsibilities. The course is perfect for SIROs who are new in post, need to refresh their understanding and build their confidence or one of the following roles;

• Administrative roles managing information
• Data Protection Officers (DPO)
• Directors and Deputies
• Heads of Departments & Deputies
• Senior Managers who work with sensitive data
• HR, Finance and other administrative teams that have access to sensitive data

Course Outline

The role of the Senior Information Risk Owner (SIRO) is a key function across all areas of the public sector, including Healthcare, NHS, Nuclear, Education, Local and Central Government and in some cases even suppliers to public sectors are required to demonstrate the role. The management of risk within the Public Sector, and increasingly its supply chain, is key to ensuring the security of information assets and making informed decisions in the event of an incident or breach. 

The course will cover the following key areas:

• The current threat landscape to UK and Public Sector information and ICT systems
• The principles of information assurance and information risk management and the importance of governance and leadership
• Mandatory IA roles and their responsibilities
• Managing and responding to information security incidents

Please note we also offer a SIRO course specifically for policing organisations and will be tailored to this sector.

“I am much clearer on the responsibilities of a SIRO – particularly around responsibilities being delegated to local information asset owners. “

-Eastleigh Borough Council, Public Sector Senior Information Risk Owner (SIRO) Training 

“A much greater understanding of the role of SIRO and the strategic nature of it and also of setting our information risk and strategy approach”

-Public Health Wales, Public Sector Senior Information Risk Owner (SIRO) Training