Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.
Excerpt
hiddentrue

Informatica Systems compliance with DTAC

Info

Source - DTAC_version_1.0_FINAL_updated_16.04 https://www.nhsx.nhs.uk/key-tools-and-info/digital-technology-assessment-criteria-dtac/

Table of contents

The assessment criteria is made up of five core components. Sections A and B will provide the assessors the context required to understand your product and support your evidence. The core assessment criteria is defined in section C1-C4. Section D details the key Usability and Accessibility principles required. Further frequently asked questions are available at the end of the document.

The core criteria in Section C will determine the overall success of the assessment of your product or service. The accompanying score provided from Section D will show the level of adherence to the NHS Service Standard.

Table of Contents

A. Company information - Non-assessed section

...

Code

Question

Options

C2.1

If you are required to register with the Information Commissioner, please attach evidence of a current registration.

If you are not required to register, please attach a completed self-assessment showing the outcome from the Information Commissioner and your responses which support this determination.

Provided

View file
nameICO Registration Certificate.pdf

C2.2

Do you have a nominated Data Protection Officer (DPO)?

Yes

C2.2.1

If you are required to have a nominated Data Protection Officer, please provide their name.

See ICO Registration

Z1172626

C2.3

Does your product have access to any personally identifiable data or NHS held patient data?

Yes

C2.3.1

Please confirm you are compliant (having standards met or exceeded status) with the annual Data Security and Protection Toolkit Assessment.

Confirmed

8HK35

C2.3.2

Please attach the Data Protection Impact Assessment (DPIA) relating to the product.

Provided

See Completing a DPIA

C2.4

Please confirm your risk assessments and mitigations / access controls / system level security policies have been signed-off by your Data Protection Officer (if one is in place) or an accountable officer where exempt in question C2.2.

Confirm

C2.5

Please confirm where you store and process data (including any third-party products your product uses)

UK

C2.5.1

If you process store or process data outside of the UK, please name the country and set out how the arrangements are compliant with current legislation

AWS is an approved Cloud Provider for NHS

...

This section will be scored in relation to the NHS service standard. This will not contribute to the overall Assessment Criteria as set out in Section C.

...

Code

Question

Response

Supporting information

D1.1

Understand users and their needs in context of health and social care

Do you engage users in the development of the product?

Yes

NHS Service Standard Point 1

D1.1.1

If yes or working towards it, how frequently do you consider user needs in your product development and what methods do you use to engage users and understand their needs?

All design and operational changes consider user needs. Changes are subject to user assessment prior to deployment where appropriate

D1.2

Work towards solving a whole problem for users

Are all key user journeys mapped to ensure that the whole user problem is solved, or it is clear to users how it fits into their pathway or journey?

Working towards it.

Skyline replaces an existing product and the company staff have extensive knowledge of the environment, pathway, uses and challenges. The company is working towards formally mapping all these journeys.

NHS Service Standard Point 2 and Point 3 are often dealt with by teams together.

D1.2.1

If yes or working towards it, please attach the user journeys and/or how the product fits into a user pathway or journey

No evidence available

D1.3

Make the service simple to use

Do you undertake user acceptance testing to validate usability of the system?

Yes

NHS Service Standard Point 4

D1.3.1

If yes or working towards it, please attach information that demonstrates that user acceptance testing is in place to validate usability.

Available on request

D1.4

Make sure everyone can use the service

Are you international Web Content Accessibility Guidelines (WCAG) 2.1 level AA compliant?

Yes

NHS Service Standard Point 5

The Service Manual provides information on WCAG 2.1 level AA.

The Government Digital Service provides guidance on accessibility and accessibility statements, including a sample template.

D1.4.1

Provide a link to your published accessibility statement.

To follow

D1.5

Create a team that includes multi-disciplinary skills and perspectives

Does your team contain multidisciplinary skills?

Yes

NHS Service Standard Point 6

D1.6

Use agile ways of working

Do you use agile ways of working to deliver your product?

Yes

NHS Service Standard Point 7

D1.7

Iterate and improve frequently

Do you continuously develop your product?

Yes

NHS Service Standard Point 8

D1.8

Define what success looks like and be open about how your service is performing

Do you have a benefits case that includes your objectives and the benefits you will be measuring and have metrics that you are tracking?

Yes

NHS Service Standard Point 10

D1.9

Choose the right tools and technology

Does this product meet with NHS Cloud First Strategy?

Yes

NHS Service Standard Point 11

NHS Internet First Policy.

D1.9.1

Does this product meet the NHS Internet First Policy?

Yes

D1.10

Use and contribute to open standards, common components and patterns

Are common components and patterns in use?

Yes

Expand
titlecurrently using components from: "nhsuk-frontend": "^3.1.0",

nhsuk-input
nhsuk-select
nhsuk-label
nhsuk-icon
nhsuk-width-container
nhsuk-button
nhsuk-heading
nhsuk-button--secondary
nhsuk-form-group
nhsuk-input--error
nhsuk-heading-l
nhsuk-heading-xl
nhsuk-heading-xs
nhsuk-inset-text
nhsuk-u-visually-hidden
nhsuk-breadcrumb
nhsuk-breadcrumb__item
nhsuk-breadcrumb__link
nhsuk-fieldset
nhsuk-checkboxes
nhsuk-radios
nhusk-expander
nhusk-expander-group
nhsuk-details
nhsuk-button--reverse
nhsuk-error-message

As detailed in List common NHS Service components and patterns used /wiki/spaces/IOM/pages/2922414120 (Internal Document)

NHS Service Standard Point 13

D1.10.1

If yes, which common components and patterns have been used?

Free text

D1.11

Operate a reliable service

Do you provide a Service Level Agreement to all customers purchasing the product?

Yes

NHS Service Standard Point 14

D1.12

Do you report to customers on your performance with respect to support, system performance (response times) and availability (uptime) at a frequency required by your customers?

Yes

D1.12.1

Please attach a copy of the information provided to customers

Available on Request

D1.12.2

Please provide your average service availability for the past 12 months, as a percentage to two decimal places

Available on Request

...