Excerpt | ||
---|---|---|
| ||
Informatica Systems compliance with DTAC |
Info |
---|
Source - DTAC_version_1.0_FINAL_updated_16.04 https://www.nhsx.nhs.uk/key-tools-and-info/digital-technology-assessment-criteria-dtac/ |
Table of contents
The assessment criteria is made up of five core components. Sections A and B will provide the assessors the context required to understand your product and support your evidence. The core assessment criteria is defined in section C1-C4. Section D details the key Usability and Accessibility principles required. Further frequently asked questions are available at the end of the document.
The core criteria in Section C will determine the overall success of the assessment of your product or service. The accompanying score provided from Section D will show the level of adherence to the NHS Service Standard.
Table of Contents |
---|
A. Company information - Non-assessed section
...
Code | Question | Options | ||||
C2.1 | If you are required to register with the Information Commissioner, please attach evidence of a current registration. If you are not required to register, please attach a completed self-assessment showing the outcome from the Information Commissioner and your responses which support this determination. | Provided
| ||||
C2.2 | Do you have a nominated Data Protection Officer (DPO)? | Yes | ||||
C2.2.1 | If you are required to have a nominated Data Protection Officer, please provide their name. | See ICO Registration | ||||
C2.3 | Does your product have access to any personally identifiable data or NHS held patient data? | Yes | ||||
C2.3.1 | Please confirm you are compliant (having standards met or exceeded status) with the annual Data Security and Protection Toolkit Assessment. | Confirmed | ||||
C2.3.2 | Please attach the Data Protection Impact Assessment (DPIA) relating to the product. | Provided | ||||
C2.4 | Please confirm your risk assessments and mitigations / access controls / system level security policies have been signed-off by your Data Protection Officer (if one is in place) or an accountable officer where exempt in question C2.2. | Confirm | ||||
C2.5 | Please confirm where you store and process data (including any third-party products your product uses) | UK | ||||
C2.5.1 | If you process store or process data outside of the UK, please name the country and set out how the arrangements are compliant with current legislation | AWS is an approved Cloud Provider for NHS |
...
This section will be scored in relation to the NHS service standard. This will not contribute to the overall Assessment Criteria as set out in Section C.
...
Code | Question | Response | Supporting information | |||||
D1.1 | Understand users and their needs in context of health and social care Do you engage users in the development of the product? | Yes | ||||||
D1.1.1 | If yes or working towards it, how frequently do you consider user needs in your product development and what methods do you use to engage users and understand their needs? | All design and operational changes consider user needs. Changes are subject to user assessment prior to deployment where appropriate | ||||||
D1.2 | Work towards solving a whole problem for users Are all key user journeys mapped to ensure that the whole user problem is solved, or it is clear to users how it fits into their pathway or journey? | Working towards it. Skyline replaces an existing product and the company staff have extensive knowledge of the environment, pathway, uses and challenges. The company is working towards formally mapping all these journeys. | NHS Service Standard Point 2 and Point 3 are often dealt with by teams together. | |||||
D1.2.1 | If yes or working towards it, please attach the user journeys and/or how the product fits into a user pathway or journey | No evidence available | ||||||
D1.3 | Make the service simple to use Do you undertake user acceptance testing to validate usability of the system? | Yes | ||||||
D1.3.1 | If yes or working towards it, please attach information that demonstrates that user acceptance testing is in place to validate usability. | Available on request | ||||||
D1.4 | Make sure everyone can use the service Are you international Web Content Accessibility Guidelines (WCAG) 2.1 level AA compliant? | Yes | The Service Manual provides information on WCAG 2.1 level AA. The Government Digital Service provides guidance on accessibility and accessibility statements, including a sample template. | |||||
D1.4.1 | Provide a link to your published accessibility statement. | To follow | ||||||
D1.5 | Create a team that includes multi-disciplinary skills and perspectives Does your team contain multidisciplinary skills? | Yes | ||||||
D1.6 | Use agile ways of working Do you use agile ways of working to deliver your product? | Yes | ||||||
D1.7 | Iterate and improve frequently Do you continuously develop your product? | Yes | ||||||
D1.8 | Define what success looks like and be open about how your service is performing Do you have a benefits case that includes your objectives and the benefits you will be measuring and have metrics that you are tracking? | Yes | ||||||
D1.9 | Choose the right tools and technology Does this product meet with NHS Cloud First Strategy? | Yes | ||||||
D1.9.1 | Does this product meet the NHS Internet First Policy? | Yes | ||||||
D1.10 | Use and contribute to open standards, common components and patterns Are common components and patterns in use? | Yes
As detailed in List common NHS Service components and patterns used /wiki/spaces/IOM/pages/2922414120 (Internal Document) | ||||||
D1.10.1 | If yes, which common components and patterns have been used? | Free text | ||||||
D1.11 | Operate a reliable service Do you provide a Service Level Agreement to all customers purchasing the product? | Yes | ||||||
D1.12 | Do you report to customers on your performance with respect to support, system performance (response times) and availability (uptime) at a frequency required by your customers? | Yes | ||||||
D1.12.1 | Please attach a copy of the information provided to customers | Available on Request | ||||||
D1.12.2 | Please provide your average service availability for the past 12 months, as a percentage to two decimal places | Available on Request |
...