This is an HTML version of an attachment to the Freedom of Information request 'Data Privacy Compliance Tools'.

Jeffrey Johnson
Information Management
Shire Hall
CV34 4RL
Please ask for Yunus Khalifa
Our ref: 8868433
Your ref: 
Date: 19 April 2023
Dear Jeffrey Johnson
Freedom of Information Act 2000
Your request for information has been considered by Warwickshire County Council 
under the Freedom of Information Act 2000. 
I can confirm that the information you have requested is held by Warwickshire County 
Please see below for further details.
You asked us:
 1. Does your organisation use any applications or software to record Record of 
Processing Activity (ROPA)? If so, please state the product name(s) and version 
numbers(s) (if known) 
We use Corestream's Information Asset Management System - Data Governance 
System - latest version.
2. Does your organisation use any applications or software to support preparation for, or 
maintenance of ISO 27001 and/or ISO 27701 compliance? If so, please state the 
product name(s) and version numbers(s) (if known).

3. Does your organisation use any applications or software associated with data breach 
management? If so, please state the product name(s) and version numbers(s) (if 
Warwickshire County Council uses Visual Files (v4.2.2) as our case management 
system so we hold all details of data incidents on this software. Visual Files also 
allows us to keep track of the life cycle of a breach so that we can report on open 
and closed incidents along with their risk levels and recommendations. 
4. Does your organisation use any applications or software for Policy Management? If 
so, please state the product name(s) and version numbers(s) (if known)
Warwickshire County Council uses Sharepoint 365 to manage policies, 
procedures and guidance published to the intranet and Council's website.
5. Does your organisation use any applications or software associated with handling 
FOI requests? If so, please state the product name(s) and version numbers(s) (if 
We use Manage My Request (v9.1), product provided by Civica
6. Does your organisation have any plans to explore the market regarding data privacy 
compliance tools? If so, please describe.
We are preparing for the re-procurement of our Record of Processing Activity 
(RoPA)/Data Governance System to start in October 2023.
7. Who is responsible for procuring ICT applications that support your organisation's 
Information Governance teams? A job-title & directorate will be sufficient.
Information Governance Team Lead, Resources - in conjunction with 
Information Management
Shire Hall 
CV34 4RL 
If you are not content with the outcome of the internal review, you have the right to 
apply directly to the Information Commissioner for a decision.
The Information Commissioner can be contacted at:
The Information Commissioner's Office,
Wycliffe House,
Water Lane,

SK9 5AF.
Phone: 0303 123 1113 
I will now close your request as of this date.
Yours faithfully 
Yunus Khalifa
Information Rights Officer